<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="319">
<package pkgid="e0f0801e7691fe8d62a0cc5679b3e121ab26b7b2424f4708c0d1556643cb1d1d" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="e42dbda1c9a039e038267e66fc9d99ce8caf5998e3398f14d08dda01e9511ed6" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="eb3098d5ce04160eeac9b75943171df48707e9a45ba8c51f7ff8c8184030b12a" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="5b366714a4e0dc759c746983a60f527f3f40f61d043e201b58040c6321ed381b" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="f8a08fa990e1ec35ac763f21971b5fc34e6efee7ca79ad6de1a88a0d22798f58" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="960aca1812f292192ecda83ab76e4d78430f5a1ca2cabd0fad5ba57f75ea238c" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="e3fa5c29c77f722821f8de278dd109a16e0d74ec4603063f3d251ded837010ba" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="c466c9662e0573318fc318d6ef7c0332d628aeace7e6144a7cd9db73ed3feb72" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="b353cafeff516375ad8fbeb9a330f38210fda1ba989e458bd90614a08312eb66" name="NetworkManager-ovs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="abc691a64f49a9bdb91245b28e11c797d7f99e258d4b9868dd12d6bf3f148dd0" name="NetworkManager-ppp-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="e2461a92e64c40b42d38ec52b0f382faa7cce96a3e0a58f28222870ae6c280e4" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="4a0b6ac061fd8e9dea5379de97144c020ee414b671eb5124ddcfbbdd2ade5f79" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="6c0eafe181d3b80a181243818ae0e074036d153e403a0d9d64c72be93fb5af4c" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="e5b5cd6289232898602454a4d625f34d5ba9106036035fa316031320419d7fe2" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.20.0" rel="5.el8_1"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.14.0-14" date="1549627200">- clients: fix string list setter (rh #1671200)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.1" date="1559736000">- Update to a 1.20 snapshot
- core: fix a possible crash on device removal (rh #1659790)
- core: fix automatic activation of software deviecs (rh #1667874)
- team: use strict JSON parsing for configuration (rh #1691619)
- team: don't kill teamd for external devices (rh #1693142)
- logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.2" date="1560513600">- Update to a newer 1.20 snapshot
- ovs: support dpdk interfaces (rh #1612503)
- libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
- ipv6: add 'disabled' method (rh #1643841)
- device: fix matching parent device by connection UUID (rh #1716438)
- cli: fix default value for team.runner-min-ports (rh #1716987)
- initrd: re-enable the generator (rh #1626348)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-0.3" date="1561032000">- initrd: disable the generator again</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-0.4" date="1564142400">- Update to 1.20-rc1 snapshot
- settings: support read-only directory for keyfile profiles (rh #1674545)
- settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
- settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
- openvswitch: don't release slaves on quit (rh #1733709)
- dhcp: expose private options for internal DHCP plugin (rh #1663253)
- device: fix route table setting when re-activating device (rh #1719318)
- man: clarify example in nm-openvswitch manual page (rh #1638038)
- man: various improvements of manual pages (rh #1612554)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-1" date="1565092800">- Update to 1.20.0 release
- fix license comments for RPM package (rh #1723395)
- dhcp: disable experimental nettools DHCP plugin</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.20.0-2" date="1565870400">- Import translations (rh #1689999)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.20.0-3" date="1566907200">- wifi: detect FT support per device to fix issues with driver support (rh #1743730)
- doc: fix default values in pre-generated documentation (rh #1737945)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-4" date="1573473600">- try to keep MTU after the parent interface changes its MTU (rh #1751079)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.20.0-5" date="1574337600">- ipv6: disable kernel handling of RAs (accept_ra) (rh #1734470)
- device: fix setting MTU lower than 1280 when IPv6 is disabled (rh #1753128)</changelog>
</package>
<package pkgid="dbc40eeb67fc09cd8d28be681bf108020744d4871abb72bebcd8570f0d94e353" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="762bf2588f243ad473116a02a850c7efcf02dfdc00c9bf97ce8c0f500260f68a" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="7ec176dd5163ff685cbf5277dd8b7646bdff4ecb8a7dc26ad07478abd0a7f834" name="augeas-debugsource" arch="i686">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="9f7c19b6fa3a5330653bfa02add915d65e63c8c51a5c1eee98e8e3881f4b7783" name="augeas-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="9119d3704b3241fc252c62f2101ccac5312facc914fa21859090a6e540bbeb44" name="augeas-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="0d76597d75c8c9c8ec6828d849385921667a5370eecc98161b730541361f4735" name="augeas-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="2.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-3" date="1539000000">- Backport some upstream commits to fix few memory leaks, and potential
  memory issues (RHBZ#1602446)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-4" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1649262)
- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-5" date="1542974400">- Rsyslog: support include() directive (RHBZ#1652832)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-6" date="1543492800">- Semanage: new lens (RHBZ#1652840)
- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653768)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-7" date="1544616000">- Anaconda: new lens (RHBZ#1657192)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.10.1-8" date="1544702400">- Add simple tests (RHBZ#1653994)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-1" date="1557835200">- New upstream release (RHBZ#1709416)
  * Fstab: allow leading whitespaces (RHBZ#1671950)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2" date="1559563200">- Disable static libraries, not needed in RHEL.</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.12.0-2.el8_1.1" date="1581336000">- Krb5: improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1800552)</changelog>
</package>
<package pkgid="fa57716980e557e50f2b35b951e0a63a094e89d14fe56ebfcba6a25f6ad2c596" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.30" rel="58.el8_1.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-50" date="1552305600">- Add support for disassembling NFP binaries.  (#1644391)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-51" date="1552305601">- Add support for the arch13 extension to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-52" date="1552305602">- Add support for partially relocatable GOT sections on the s390x architecture.  (#1525406)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-53" date="1552478400">- Do not enable IBT when an object file contains code but no GNU Property notes.  (#1687774)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-54" date="1552564800">- Further enhance the support for the arch13 extensions to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-55" date="1558353600">- Fix a problem when producing non-PIE binaries using the GOLD linker for AArch64.  (#1693661)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-56" date="1558353601">- Remove a spurious debugging message left in the binutils-note-merge-improvements.patch.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-57" date="1558353602">- Fix a thinko in the new gas tests for the s390x arch13 extension.  (#1710860)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.30-58" date="1568376000">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.1" date="1576497600">- Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783957)</changelog>
</package>
<package pkgid="2d1f4bc4b8445d91d9247c1058cbebbbf52ef641f0a8bafdf6c90224e162b626" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.30" rel="58.el8_1.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-51" date="1552305600">- Add support for the arch13 extension to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-52" date="1552305601">- Add support for partially relocatable GOT sections on the s390x architecture.  (#1525406)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-53" date="1552478400">- Do not enable IBT when an object file contains code but no GNU Property notes.  (#1687774)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-54" date="1552564800">- Further enhance the support for the arch13 extensions to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-55" date="1558353600">- Fix a problem when producing non-PIE binaries using the GOLD linker for AArch64.  (#1693661)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-56" date="1558353601">- Remove a spurious debugging message left in the binutils-note-merge-improvements.patch.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-57" date="1558353602">- Fix a thinko in the new gas tests for the s390x arch13 extension.  (#1710860)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.30-58" date="1568376000">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.1" date="1576497600">- Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783957)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.2" date="1582027200">- Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1803825)</changelog>
</package>
<package pkgid="2a151d60cbbeea48332bb9fdbea34a235ba40586ca86d611c387984ebfbd1669" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.30" rel="58.el8_1.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-50" date="1552305600">- Add support for disassembling NFP binaries.  (#1644391)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-51" date="1552305601">- Add support for the arch13 extension to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-52" date="1552305602">- Add support for partially relocatable GOT sections on the s390x architecture.  (#1525406)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-53" date="1552478400">- Do not enable IBT when an object file contains code but no GNU Property notes.  (#1687774)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-54" date="1552564800">- Further enhance the support for the arch13 extensions to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-55" date="1558353600">- Fix a problem when producing non-PIE binaries using the GOLD linker for AArch64.  (#1693661)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-56" date="1558353601">- Remove a spurious debugging message left in the binutils-note-merge-improvements.patch.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-57" date="1558353602">- Fix a thinko in the new gas tests for the s390x arch13 extension.  (#1710860)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.30-58" date="1568376000">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.1" date="1576497600">- Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783957)</changelog>
</package>
<package pkgid="4e3bcc4fa2b7f25e4d77ecde5c5387a3a54799c78586c708fc02264797dad158" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.30" rel="58.el8_1.2"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-51" date="1552305600">- Add support for the arch13 extension to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-52" date="1552305601">- Add support for partially relocatable GOT sections on the s390x architecture.  (#1525406)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-53" date="1552478400">- Do not enable IBT when an object file contains code but no GNU Property notes.  (#1687774)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-54" date="1552564800">- Further enhance the support for the arch13 extensions to the s390x architecture.  (#1659437)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-55" date="1558353600">- Fix a problem when producing non-PIE binaries using the GOLD linker for AArch64.  (#1693661)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-56" date="1558353601">- Remove a spurious debugging message left in the binutils-note-merge-improvements.patch.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-57" date="1558353602">- Fix a thinko in the new gas tests for the s390x arch13 extension.  (#1710860)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.30-58" date="1568376000">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.1" date="1576497600">- Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783957)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-58.2" date="1582027200">- Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1803825)</changelog>
</package>
<package pkgid="5ca207a0cabc05c3087480f90971dafa0bbbd0746b7d74a63018eac90e7e732a" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="535546240c9c37b19a718cd304ff2b87573e9da2003fd18a40b24dca2a30b92c" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="3e857d565ec290b1206d95d489593a3ca87fcaf4d2c1fd60c9cc9ba5f915e1dc" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="df6e2b2ab823884e930beec359276333e885f6f6e0ca698f76c388f3f801890e" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="fd11946117df53baaedb2d85046f20c703d49c4011b24d08436505e18dc3083c" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="c059f9b63ff32d12869163f51ff5573162f4a5dcfa3d1f8fb0dedb0aa16830fe" name="bsdtar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="8.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 3.3.1-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-5" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-1" date="1518091200">- rebase to latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
</package>
<package pkgid="f3cab495b00ecf2cd868a70bd82a9fd2bed2ac576af3b5b6575e2485602e7402" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.30" rel="6.el8_1.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-6" date="1524225600">- fix crash caused by mistakenly enabled leaf optimization (#1558249)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-7" date="1525435200">- add provides to coreutils-single to make it a drop-in replacement (#1572693)
- reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-8" date="1527508800">- ls: increase the allowed abmon width from 5 to 12 (#1577872)
- date, ls: pick strftime fixes from glibc to improve locale support (#1577872)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-1" date="1530532800">- new upstream release 8.30</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-2" date="1530705600">- sync i18n patches with Suse (patch by Bernhard Voelker)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-3" date="1531224000">- rename gnulib's renameat2 to renameatu to avoid clash with glibc (#1598518)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-4" date="1539259200">- fix heap-based buffer overflow in vasnprintf() (CVE-2018-17942)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-5" date="1541592000">- sync: fix open() fallback bug (#1602463)
- fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6" date="1547208000">- cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6.el8_1.1" date="1580299200">- chcon: do not validate security context if SELinux is disabled (#1777831)</changelog>
</package>
<package pkgid="b549b535ab5c012ad48969364cdae52bfeefa2001675084d4cc47f192910dafb" name="coreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="8.30" rel="6.el8_1.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-6" date="1524225600">- fix crash caused by mistakenly enabled leaf optimization (#1558249)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-7" date="1525435200">- add provides to coreutils-single to make it a drop-in replacement (#1572693)
- reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-8" date="1527508800">- ls: increase the allowed abmon width from 5 to 12 (#1577872)
- date, ls: pick strftime fixes from glibc to improve locale support (#1577872)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-1" date="1530532800">- new upstream release 8.30</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-2" date="1530705600">- sync i18n patches with Suse (patch by Bernhard Voelker)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-3" date="1531224000">- rename gnulib's renameat2 to renameatu to avoid clash with glibc (#1598518)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-4" date="1539259200">- fix heap-based buffer overflow in vasnprintf() (CVE-2018-17942)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-5" date="1541592000">- sync: fix open() fallback bug (#1602463)
- fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6" date="1547208000">- cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6.el8_1.1" date="1580299200">- chcon: do not validate security context if SELinux is disabled (#1777831)</changelog>
</package>
<package pkgid="24612a5b1119122b166e2ad1efb42552fd1d6dd659fb452226562a31a9fa22b6" name="coreutils-single-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.30" rel="6.el8_1.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-6" date="1524225600">- fix crash caused by mistakenly enabled leaf optimization (#1558249)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-7" date="1525435200">- add provides to coreutils-single to make it a drop-in replacement (#1572693)
- reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.29-8" date="1527508800">- ls: increase the allowed abmon width from 5 to 12 (#1577872)
- date, ls: pick strftime fixes from glibc to improve locale support (#1577872)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-1" date="1530532800">- new upstream release 8.30</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-2" date="1530705600">- sync i18n patches with Suse (patch by Bernhard Voelker)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-3" date="1531224000">- rename gnulib's renameat2 to renameatu to avoid clash with glibc (#1598518)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-4" date="1539259200">- fix heap-based buffer overflow in vasnprintf() (CVE-2018-17942)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-5" date="1541592000">- sync: fix open() fallback bug (#1602463)
- fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6" date="1547208000">- cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.30-6.el8_1.1" date="1580299200">- chcon: do not validate security context if SELinux is disabled (#1777831)</changelog>
</package>
<package pkgid="81b4150efb2a5552ecd9be4cf779a5ddb721aea79c4e2875e8bc7dfadc7c5972" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049" rel="27.git20190906.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-14.git20190626" date="1561550400">- fips: ensure fs module for /boot is installed</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-15.git20190708" date="1562587200">- network: skip already enslaved interfaces</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-16.git20190716" date="1563278400">- 01fips: add cfb cipher</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-17.git20190725" date="1564056000">- rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-18.git20190725" date="1564056001">- dracut.spec: add 06rngd</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-24.git20190802" date="1564747200">- 95fcoe: load 'libfcoe' module as a fallback
- 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
- dracut: let module handling function accept optional path option
- squash: also squash systemctl if switch-root is not needed
- squash: fix and simplify required_in_root
- squash: squash systemd binary and udevadm</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-25.git20190806" date="1565092800">- 90kernel-modules-extra: don't resolve symlinks before instmod</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-26.git20190806" date="1565092801">- net-lib: fix typo $li -&gt; $_li</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-27.git20190906" date="1567771200">- modules.d: fix udev rules detection of multipath devices</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-27.git20190906.1" date="1573041600">- various fixes to adapt to RHCOS and FCOS</changelog>
</package>
<package pkgid="f4f55b2747b2854104065d1edc46812d2b055892c919e66ce1bd96278bf7160f" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049" rel="27.git20190906.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-14.git20190626" date="1561550400">- fips: ensure fs module for /boot is installed</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-15.git20190708" date="1562587200">- network: skip already enslaved interfaces</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-16.git20190716" date="1563278400">- 01fips: add cfb cipher</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-17.git20190725" date="1564056000">- rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-18.git20190725" date="1564056001">- dracut.spec: add 06rngd</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-24.git20190802" date="1564747200">- 95fcoe: load 'libfcoe' module as a fallback
- 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
- dracut: let module handling function accept optional path option
- squash: also squash systemctl if switch-root is not needed
- squash: fix and simplify required_in_root
- squash: squash systemd binary and udevadm</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-25.git20190806" date="1565092800">- 90kernel-modules-extra: don't resolve symlinks before instmod</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-26.git20190806" date="1565092801">- net-lib: fix typo $li -&gt; $_li</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-27.git20190906" date="1567771200">- modules.d: fix udev rules detection of multipath devices</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-27.git20190906.1" date="1573041600">- various fixes to adapt to RHCOS and FCOS</changelog>
</package>
<package pkgid="6c1244a51072ce4c0d1abc3b11fb2d43d3209453cf4770bff8b0ff893aae9053" name="fapolicyd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="3.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.6-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.7-1" date="1538568000">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.7-3" date="1548936000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-1" date="1552305600">- New upstream release
- Added new DNF plugin that can update the trust database when rpms are installed
- Added support for FAN_OPEN_EXEC_PERM</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-2" date="1552478400">- backport some patches to resolve dac_override for fapolicyd</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.9-1" date="1557144000">- New upstream release
- imported from fedora30
  resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-1" date="1560859200">- new upstream release
Resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-2" date="1563796800">- Convert hashes to lowercase like sha256sum outputs
- Stop littering STDOUT output for dnf plugin in fapolicyd
Resolves: rhbz#1721496</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3" date="1563969600">- added missing manpage for fapolicyd-cli
Resolves: rhbz#1708015</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.1" date="1579521600">RHEL 8.1.Z
- fixed: fapolicyd blocks dracut from generating initramfs
- changed default fapolicyd.rules
Resolves: rhbz#1791856</changelog>
</package>
<package pkgid="a4d04a8e25d671879694b22688456c3c181cf8680c43d56c85071bb5d881b3ad" name="fapolicyd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="3.el8_1.3"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.7-1" date="1538568000">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.7-3" date="1548936000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-1" date="1552305600">- New upstream release
- Added new DNF plugin that can update the trust database when rpms are installed
- Added support for FAN_OPEN_EXEC_PERM</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-2" date="1552478400">- backport some patches to resolve dac_override for fapolicyd</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.9-1" date="1557144000">- New upstream release
- imported from fedora30
  resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-1" date="1560859200">- new upstream release
Resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-2" date="1563796800">- Convert hashes to lowercase like sha256sum outputs
- Stop littering STDOUT output for dnf plugin in fapolicyd
Resolves: rhbz#1721496</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3" date="1563969600">- added missing manpage for fapolicyd-cli
Resolves: rhbz#1708015</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.1" date="1579521600">RHEL 8.1.Z
- fixed: fapolicyd blocks dracut from generating initramfs
- changed default fapolicyd.rules
Resolves: rhbz#1791856</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.3" date="1583236800">RHEL 8.1.0.Z
- fixed typo in dracut rule
- changed default fapolicyd.rules
Resolves: rhbz#1809844</changelog>
</package>
<package pkgid="77049b5ae42a6dcdb8dd75eeb618697a7008e21bdfd62c836dbb43b668ac1353" name="fapolicyd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="3.el8_1.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.6-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.7-1" date="1538568000">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.7-3" date="1548936000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-1" date="1552305600">- New upstream release
- Added new DNF plugin that can update the trust database when rpms are installed
- Added support for FAN_OPEN_EXEC_PERM</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-2" date="1552478400">- backport some patches to resolve dac_override for fapolicyd</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.9-1" date="1557144000">- New upstream release
- imported from fedora30
  resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-1" date="1560859200">- new upstream release
Resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-2" date="1563796800">- Convert hashes to lowercase like sha256sum outputs
- Stop littering STDOUT output for dnf plugin in fapolicyd
Resolves: rhbz#1721496</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3" date="1563969600">- added missing manpage for fapolicyd-cli
Resolves: rhbz#1708015</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.1" date="1579521600">RHEL 8.1.Z
- fixed: fapolicyd blocks dracut from generating initramfs
- changed default fapolicyd.rules
Resolves: rhbz#1791856</changelog>
</package>
<package pkgid="8032344e857bec88988bb2cac3c9e0f0570af0d8088ae2d0817dea02f992018c" name="fapolicyd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="3.el8_1.3"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.7-1" date="1538568000">- New upstream bugfix release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.7-3" date="1548936000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-1" date="1552305600">- New upstream release
- Added new DNF plugin that can update the trust database when rpms are installed
- Added support for FAN_OPEN_EXEC_PERM</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.8-2" date="1552478400">- backport some patches to resolve dac_override for fapolicyd</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.9-1" date="1557144000">- New upstream release
- imported from fedora30
  resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-1" date="1560859200">- new upstream release
Resolves: rhbz#1673323</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-2" date="1563796800">- Convert hashes to lowercase like sha256sum outputs
- Stop littering STDOUT output for dnf plugin in fapolicyd
Resolves: rhbz#1721496</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3" date="1563969600">- added missing manpage for fapolicyd-cli
Resolves: rhbz#1708015</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.1" date="1579521600">RHEL 8.1.Z
- fixed: fapolicyd blocks dracut from generating initramfs
- changed default fapolicyd.rules
Resolves: rhbz#1791856</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.8.10-3.3" date="1583236800">RHEL 8.1.0.Z
- fixed typo in dracut rule
- changed default fapolicyd.rules
Resolves: rhbz#1809844</changelog>
</package>
<package pkgid="02ac28f43793136d3b15968902610daa61235f66fb5100509492df338cdf3a9b" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.28" rel="72.el8_1.1"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-64" date="1560168000">- Avoid ABI exposure of the NSS service_user type (#1710894)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-65" date="1560340800">- glibc-all-langpacks: Do not delete locale archive during update (#1717347)
- Do not mark /usr/lib/locale/locale-archive as a configuration file
  because it is always automatically overwritten by build-locale-archive.</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-66" date="1560513600">- Avoid header conflict between &lt;sys/stat.h&gt; and &lt;linux/stat.h&gt; (#1699194)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-67" date="1563451200">- Reject IP addresses with trailing characters in getaddrinfo (#1727241)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-68" date="1563451201">- Account for size of locale-archive in rpm package (#1725131)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-69" date="1563796800">- Fix invalid free under valgrind with libdl (#1717438)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-70" date="1563796801">- Avoid nscd assertion failure during persistent db check (#1727152)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-71" date="1563796802">- Remove copy_file_range emulation (#1724975)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-72" date="1563796803">- Skip wide buffer handling for legacy stdio handles (#1722215)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-72.1" date="1574942400">- s390x: Fix z15 strstr for patterns crossing pages (#1777797)</changelog>
</package>
<package pkgid="764d720bc699c61cf12e3f2258678c835e41c1098afb87733d0a103bc14f5117" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.28" rel="72.el8_1.1"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-64" date="1560168000">- Avoid ABI exposure of the NSS service_user type (#1710894)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-65" date="1560340800">- glibc-all-langpacks: Do not delete locale archive during update (#1717347)
- Do not mark /usr/lib/locale/locale-archive as a configuration file
  because it is always automatically overwritten by build-locale-archive.</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-66" date="1560513600">- Avoid header conflict between &lt;sys/stat.h&gt; and &lt;linux/stat.h&gt; (#1699194)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-67" date="1563451200">- Reject IP addresses with trailing characters in getaddrinfo (#1727241)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-68" date="1563451201">- Account for size of locale-archive in rpm package (#1725131)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-69" date="1563796800">- Fix invalid free under valgrind with libdl (#1717438)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-70" date="1563796801">- Avoid nscd assertion failure during persistent db check (#1727152)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-71" date="1563796802">- Remove copy_file_range emulation (#1724975)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-72" date="1563796803">- Skip wide buffer handling for legacy stdio handles (#1722215)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-72.1" date="1574942400">- s390x: Fix z15 strstr for patterns crossing pages (#1777797)</changelog>
</package>
<package pkgid="2304e05163f86959298cda28ff0b759ccd1db9e290cdb60ec19dde243fb8a021" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.28" rel="72.el8_1.1"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-64" date="1560168000">- Avoid ABI exposure of the NSS service_user type (#1710894)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-65" date="1560340800">- glibc-all-langpacks: Do not delete locale archive during update (#1717347)
- Do not mark /usr/lib/locale/locale-archive as a configuration file
  because it is always automatically overwritten by build-locale-archive.</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-66" date="1560513600">- Avoid header conflict between &lt;sys/stat.h&gt; and &lt;linux/stat.h&gt; (#1699194)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-67" date="1563451200">- Reject IP addresses with trailing characters in getaddrinfo (#1727241)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-68" date="1563451201">- Account for size of locale-archive in rpm package (#1725131)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-69" date="1563796800">- Fix invalid free under valgrind with libdl (#1717438)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-70" date="1563796801">- Avoid nscd assertion failure during persistent db check (#1727152)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-71" date="1563796802">- Remove copy_file_range emulation (#1724975)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-72" date="1563796803">- Skip wide buffer handling for legacy stdio handles (#1722215)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-72.1" date="1574942400">- s390x: Fix z15 strstr for patterns crossing pages (#1777797)</changelog>
</package>
<package pkgid="d0af6e8ee1fc97c00fcf0c9804cd7898cf6f109ba4309b57810d651daf4f8c49" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.28" rel="72.el8_1.1"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-64" date="1560168000">- Avoid ABI exposure of the NSS service_user type (#1710894)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-65" date="1560340800">- glibc-all-langpacks: Do not delete locale archive during update (#1717347)
- Do not mark /usr/lib/locale/locale-archive as a configuration file
  because it is always automatically overwritten by build-locale-archive.</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-66" date="1560513600">- Avoid header conflict between &lt;sys/stat.h&gt; and &lt;linux/stat.h&gt; (#1699194)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-67" date="1563451200">- Reject IP addresses with trailing characters in getaddrinfo (#1727241)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-68" date="1563451201">- Account for size of locale-archive in rpm package (#1725131)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-69" date="1563796800">- Fix invalid free under valgrind with libdl (#1717438)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-70" date="1563796801">- Avoid nscd assertion failure during persistent db check (#1727152)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-71" date="1563796802">- Remove copy_file_range emulation (#1724975)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-72" date="1563796803">- Skip wide buffer handling for legacy stdio handles (#1722215)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-72.1" date="1574942400">- s390x: Fix z15 strstr for patterns crossing pages (#1777797)</changelog>
</package>
<package pkgid="5daf6c7447dbaad2f078db6da041d48ad2bdd432a634ca9197fc97a7f8b25432" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="21f78260e6a1480c1ac89b3d5f52e3b07522cca88f212eea1944a1b44a487a63" name="grub2-debugsource" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="8e9790682014ed1232d47667180cb4217363e265655297f69f1cebcdad945efa" name="grub2-tools-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="321a4e9c09d956e28e184a5b9159261bf29e7304d7781f84d62d81cf96100bfd" name="grub2-tools-efi-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="897d72ffbed5c2292db57fcd82a8725f43c63e00004c4b9df3df75b601e6757e" name="grub2-tools-extra-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="9cde01e07315bb912ee66f7f55419d22feb4c5116767399bbbda2b644cc90f61" name="grub2-tools-minimal-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="78.el8_1.1"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-69" date="1558440000">- Enable package gating
  Resolves: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-70" date="1558612800">- Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
  builds, because rpmdiff doesn't like the current way failing.
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-71" date="1558699200">- Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-72" date="1558958400">- Build with the correct target
  Related: rhbz#1653961</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-73" date="1559131200">- Rebuild once again to try to get rpmdiff happy.
  Related: rhbz#1653961</changelog>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 2.02-74" date="1559649600">- Use '-g' instead of '-g3' when compiling grub2.
  Related: rhbz#1653961</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-75" date="1560945600">- Fix setting default entry on ppc64le when using OPAL
  Resolves: rhbz#1721815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-76" date="1565352000">- Include regexp module in EFI builds
  Resolves: rhbz#1737670</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-77" date="1569499200">- 10_linux_bls: don't add --users option to generated menu entries
  Resolves: rhbz#1755815</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-78.el8_1.1" date="1575374400">- grub-set-bootflag: Write new env to tmpfile and then rename (hdegoede)
  Resolves: CVE-2019-14865</changelog>
</package>
<package pkgid="929c12b295f67f12898a8365bac2a5359ef29f6983b15386b22c23b381ae6833" name="icu-debuginfo" arch="i686">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="dc95a72839e948ff6e83df9a6ce14f7e6d4fd81d96f1d6ffb650fbf029d03cb6" name="icu-debuginfo" arch="x86_64">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="f5f5ace512efce6f2b50e27a48f952abe44875e15089bea6209f925f8f8ffb20" name="icu-debugsource" arch="i686">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="b282ab3fd8ea797e52cc578f450a27f81cff44b05c94a779e9b0720ad2a8034e" name="icu-debugsource" arch="x86_64">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="57c66a1d9d448f1a80fd5a937468a83e9c435bb3da5f78d6cdae243085c8edcd" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="fb5713327af2bc3628e36d56ea0203cc3a67fe5849850ced251c1f039252cfd2" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="f8227038802d092ecd43d01ad2ed6735e34d083e108d438a1eb651e9884b4f3a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="ed2a73644afab727ae4bdbaa9a25649244903c9747f97d4f085b1525bf1f6936" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="31acf63ea65e31dbb3443a1eff9b7712fc72d27e69a51f00950399d2d0845b5d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="ec45ac84e5a280b0481b06c78121c09e30695b7b9e4e55432d871ab6f9107e78" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="cc435a0343898638a9595a73db298553e9207374c2e075587e2e936061d31845" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="840606b0a9cd9ad3d410ca24666a2c88f14a9a42a93e153d98cb72aead40f375" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="248df77ea996850dd92b13d0ca54084a29e7df5bd47e2846a00c71d637e6e14f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="516ce43e564d356003a28141cc94af9cc9dbd5738a23b1d7a35191a4b07a4f91" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="72b8f61b7b03938c3bd9dacbd30697f224ce7b54058f694781f6f31bca278b3b" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="457fd015c6846edd34ae49602c255aca64b6de20db7bbe717cc680f1b316f08d" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="f203f3deb7531cdc0b75cba8ec55076446d473d48bb47fef4e715098638d8990" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="8c055ae76758a2e2aba0e6a06f1034309d54cf8b798786a3f0201097fd74fc31" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="d2ce354428cde102b4ef76805e62569a9aa99b6f7887895064f6a52583792654" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="08896a169cc19e2488f8901dcf1b0a2b337e088f8a8e94348d2a52cf18f4b295" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="64b0e20e47d0953acc8e5450cad09d5ee5f85ef4b7cc3696408f75f0f797bf25" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="c6467e3393a5b5bf6afea41121c6a4cdd3c930fcfddbe9ccc0f31775ddfb7dfe" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="7927b2be64ab601486b4fe0977ef964818ff6aa0d54e31df3fbf5f281e67e95c" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.rt24.94.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-139.rt24.85.el8]" date="1566993600">- [rt] kernel-rt-4.18.0-139.rt24.84.el8 (Clark Williams) [1678887]
- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="d2223776aa6cf875a2e31e5547d8e3fca64cd4157a05f404d20e6ca08052f023" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.rt24.95.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.3.rt24.95.el8_1]" date="1573473600">- [rt] kernel-rt-4.18.0-147.0.3.rt24.94.el8_1 (Juri Lelli)
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="6df5cc1805b07a1dfccba564eda0b58e3a637720b19e0b5c0267c2eb5d0e41f7" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.rt24.96.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="c4dd288e3b5f89b2ad76086708a5559c116fcad5cc7f162a219f67e8b0afc89e" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.rt24.101.el8_1"/>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.4.1.rt24.97.el8_1]" date="1576497600">- [rt] kernel-rt-4.18.0-147.4.1.rt24.96.el8_1 (Juri Lelli)
- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.5.1.rt24.98.el8_1]" date="1579003200">- [rt] kernel-rt-4.18.0-147.5.1.rt24.97.el8_1 ("Luis Claudio R. Goncalves")
- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.6.1.rt24.99.el8_1]" date="1581940800">- [rt] kernel-rt-4.18.0-147.6.1.rt24.98.el8_1 [1794136]
- [rt] lockdep: Increase MAX_LOCK_[ENTRIES|CHAIN_BITS] [1794199]
- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.7.1.rt24.100.el8_1]" date="1582372800">- [rt] kernel-rt-4.18.0-147.7.1.rt24.99.el8_1 ("Luis Claudio R. Goncalves")
- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.8.1.rt24.101.el8_1]" date="1582718400">- [rt] kernel-rt-4.18.0-147.8.1.rt24.100.el8_1 (Juri Lelli)</changelog>
</package>
<package pkgid="4243b77edd179c07453de9b65a6c561c11fc97b82bfd84da15f4329be5113a44" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.rt24.94.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-139.rt24.85.el8]" date="1566993600">- [rt] kernel-rt-4.18.0-139.rt24.84.el8 (Clark Williams) [1678887]
- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="a334f199415cb957ce9cd31a2fd526803b95a84889f2d9e8e1adeadada4abca8" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.rt24.95.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.3.rt24.95.el8_1]" date="1573473600">- [rt] kernel-rt-4.18.0-147.0.3.rt24.94.el8_1 (Juri Lelli)
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="5d78c96f1438ca72e6bf7189fb1f3e935833980833e0e209ac8a88cafd32c760" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.rt24.96.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="924a48209f4ff222fd1573d2ef2cabbcce94a44dbfa6b29b6fc75b86616effab" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.rt24.101.el8_1"/>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.4.1.rt24.97.el8_1]" date="1576497600">- [rt] kernel-rt-4.18.0-147.4.1.rt24.96.el8_1 (Juri Lelli)
- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.5.1.rt24.98.el8_1]" date="1579003200">- [rt] kernel-rt-4.18.0-147.5.1.rt24.97.el8_1 ("Luis Claudio R. Goncalves")
- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.6.1.rt24.99.el8_1]" date="1581940800">- [rt] kernel-rt-4.18.0-147.6.1.rt24.98.el8_1 [1794136]
- [rt] lockdep: Increase MAX_LOCK_[ENTRIES|CHAIN_BITS] [1794199]
- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.7.1.rt24.100.el8_1]" date="1582372800">- [rt] kernel-rt-4.18.0-147.7.1.rt24.99.el8_1 ("Luis Claudio R. Goncalves")
- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.8.1.rt24.101.el8_1]" date="1582718400">- [rt] kernel-rt-4.18.0-147.8.1.rt24.100.el8_1 (Juri Lelli)</changelog>
</package>
<package pkgid="0fdcef94411c22c9e228f3cf334c02fb54c9e8ec718ff02263d25edaa4428d43" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.rt24.94.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-139.rt24.85.el8]" date="1566993600">- [rt] kernel-rt-4.18.0-139.rt24.84.el8 (Clark Williams) [1678887]
- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="5cac98b5a0effba5ebdb09f583d942ea2119ea4e918fe20f3613b17233decd37" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.rt24.95.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-140.rt24.86.el8]" date="1567080000">- [rt] kernel-rt-4.18.0-140.rt24.85.el8 (Clark Williams) [1678887]
- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.2.rt24.94.el8_1]" date="1572868800">- [rt] kernel-rt-4.18.0-147.0.2.rt24.93.el8_1 (Juri Lelli)
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.0.3.rt24.95.el8_1]" date="1573473600">- [rt] kernel-rt-4.18.0-147.0.3.rt24.94.el8_1 (Juri Lelli)
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="3eb90f20a7defe92fb2ee6db8f6c75fdc18a341f8c92d60f0edc4d96ef0078b3" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.rt24.96.el8_1"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; [4.18.0-141.rt24.87.el8]" date="1567166400">- [rt] kernel-rt-4.18.0-141.rt24.86.el8 (Clark Williams) [1678887]
- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-142.rt24.88.el8]" date="1567857600">- [rt] kernel-rt-4.18.0-142.rt24.87.el8 (Juri Lelli) [1678887]
- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-143.rt24.89.el8]" date="1568116800">- [rt] kernel-rt-4.18.0-143.rt24.88.el8 (Juri Lelli) [1678887]
- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-144.rt24.90.el8]" date="1568376000">- [rt] kernel-rt-4.18.0-144.rt24.89.el8 (Juri Lelli) [1678887]
- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-145.rt24.91.el8]" date="1568894400">- [rt] kernel-rt-4.18.0-145.rt24.90.el8 (Juri Lelli) [1678887]
- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="a47504e1a942ba0a70d17e30fbd6face8d56250ecb4947fe9e42bc86a3f3ed5e" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.rt24.101.el8_1"/>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-146.rt24.92.el8]" date="1569412800">- [rt] kernel-rt-4.18.0-146.rt24.91.el8 (Juri Lelli) [1678887]
- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.rt24.93.el8]" date="1569499200">- [rt] kernel-rt-4.18.0-147.rt24.92.el8 (Juri Lelli) [1678887]
- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.1.1.rt24.94.el8_1]" date="1573646400">- [rt] kernel-rt-4.18.0-147.1.1.rt24.93.el8_1 (Juri Lelli)
- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.2.1.rt24.95.el8_1]" date="1574596800">- [rt] kernel-rt-4.18.0-147.2.1.rt24.94.el8_1 (Juri Lelli)
- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.3.1.rt24.96.el8_1]" date="1574856000">- [rt] kernel-rt-4.18.0-147.3.1.rt24.95.el8_1 (Juri Lelli)
- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.4.1.rt24.97.el8_1]" date="1576497600">- [rt] kernel-rt-4.18.0-147.4.1.rt24.96.el8_1 (Juri Lelli)
- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.5.1.rt24.98.el8_1]" date="1579003200">- [rt] kernel-rt-4.18.0-147.5.1.rt24.97.el8_1 ("Luis Claudio R. Goncalves")
- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.6.1.rt24.99.el8_1]" date="1581940800">- [rt] kernel-rt-4.18.0-147.6.1.rt24.98.el8_1 [1794136]
- [rt] lockdep: Increase MAX_LOCK_[ENTRIES|CHAIN_BITS] [1794199]
- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-147.7.1.rt24.100.el8_1]" date="1582372800">- [rt] kernel-rt-4.18.0-147.7.1.rt24.99.el8_1 ("Luis Claudio R. Goncalves")
- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Juri Lelli &lt;juri.lelli@redhat.com&gt; [4.18.0-147.8.1.rt24.101.el8_1]" date="1582718400">- [rt] kernel-rt-4.18.0-147.8.1.rt24.100.el8_1 (Juri Lelli)</changelog>
</package>
<package pkgid="ae2c3bb38109c1f1b31aa5ba0200569863c773203ed8e8963d184211413543b2" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="0dc9f40db79e10cab7f505eca4dd2e92d58552f5fd6a3f8693af75fd493069b4" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="9b121a6c2bdc3c4fcc087bebd27770e3ed411b8c7823ade70efa07ebfa23b1ab" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="d452449f9aca1c21b43e4d28ff0b1682329de15490de91ae7f2f8476bcb80481" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="7d315c72e183cafc1c76a106c8a734227efcfb6d4e2e81acbe76f82c9528458d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="2fe4b98a73b42d0db101e3165459159a0689c5722f0c38a7d73215eba8f232ed" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="12.el8_1.1"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-4" date="1558958400">- kexec-kdump-howto.txt: Add document about encrypted targets
- kexec-kdump-howto.txt: Add document about initramfs rebiuld
- kexec-kdump-howto: Add note on setting correct value of kptr_restrict
- doc: fix dead links in the file kexec-kdump-howto.txt
- earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
- Get rid of duplicated strip_comments when reading config
- mkdumprd: Improve the config reading logic
- kdumpctl: don't always rebuild when extra_modules is set
- kdumpctl: follow symlink when checking for modified files
- fadump: leverage kernel support to re-regisgter FADump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-5" date="1560168000">- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-6" date="1560340800">- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default</changelog>
  <changelog author="Kairui Song &lt;kasong@redhat.com&gt; - 2.0.19-7" date="1560772800">- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-8" date="1563105600">- kdump.sysconfig/x86_64: Disable HEST by default</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-9" date="1563537600">- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-10" date="1565006400">- Forward logs in kdump kernel to console directly</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-11" date="1565006401">- Drop switch root capability for non fadump initramfs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12" date="1565352000">- Don't forward and drop journalctl logs for fadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.1" date="1573732800">- Don't execute final_action if failure_action terminates the system
- dracut-module-setup.sh: Don't use squash module for fadump
- Don't mount the dump target unless needed</changelog>
</package>
<package pkgid="4132949e29b7e6b15c905cc3595f7cbba7614de0af93c746132384ab96de30be" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="12.el8_1.2"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-5" date="1560168000">- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-6" date="1560340800">- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default</changelog>
  <changelog author="Kairui Song &lt;kasong@redhat.com&gt; - 2.0.19-7" date="1560772800">- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-8" date="1563105600">- kdump.sysconfig/x86_64: Disable HEST by default</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-9" date="1563537600">- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-10" date="1565006400">- Forward logs in kdump kernel to console directly</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-11" date="1565006401">- Drop switch root capability for non fadump initramfs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12" date="1565352000">- Don't forward and drop journalctl logs for fadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.1" date="1573732800">- Don't execute final_action if failure_action terminates the system
- dracut-module-setup.sh: Don't use squash module for fadump
- Don't mount the dump target unless needed</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.2" date="1578657600">- arm64: kdump: deal with a lot of resource entries in /proc/iomem
- arm64: kexec: allocate memory space avoiding reserved regions
- kexec: add variant helper functions for handling memory regions</changelog>
</package>
<package pkgid="52581e74aac81d44bc307a96476f387022a3070704120866d0b1fbec922ae173" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="12.el8_1.1"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-4" date="1558958400">- kexec-kdump-howto.txt: Add document about encrypted targets
- kexec-kdump-howto.txt: Add document about initramfs rebiuld
- kexec-kdump-howto: Add note on setting correct value of kptr_restrict
- doc: fix dead links in the file kexec-kdump-howto.txt
- earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
- Get rid of duplicated strip_comments when reading config
- mkdumprd: Improve the config reading logic
- kdumpctl: don't always rebuild when extra_modules is set
- kdumpctl: follow symlink when checking for modified files
- fadump: leverage kernel support to re-regisgter FADump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-5" date="1560168000">- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-6" date="1560340800">- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default</changelog>
  <changelog author="Kairui Song &lt;kasong@redhat.com&gt; - 2.0.19-7" date="1560772800">- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-8" date="1563105600">- kdump.sysconfig/x86_64: Disable HEST by default</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-9" date="1563537600">- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-10" date="1565006400">- Forward logs in kdump kernel to console directly</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-11" date="1565006401">- Drop switch root capability for non fadump initramfs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12" date="1565352000">- Don't forward and drop journalctl logs for fadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.1" date="1573732800">- Don't execute final_action if failure_action terminates the system
- dracut-module-setup.sh: Don't use squash module for fadump
- Don't mount the dump target unless needed</changelog>
</package>
<package pkgid="a706b60e169fc629c88fa2586c116ae0f5e6e0b309e230c730b95ff9559e8f10" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="12.el8_1.2"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-5" date="1560168000">- kdumpctl: check for ssh path availability when rebuild
- kdumpctl: Check kdump.conf for error when rebuild is called
- makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
- aarch64/kdump.sysconfig: Make config options similar to x86_64</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-6" date="1560340800">- kexec-kdump-howto.txt: Add notes about device dump
- Disable device dump by default</changelog>
  <changelog author="Kairui Song &lt;kasong@redhat.com&gt; - 2.0.19-7" date="1560772800">- dracut-kdump-capture.service: Use OnFailureJobMode instead of deprecated OnFailureIsolate</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-8" date="1563105600">- kdump.sysconfig/x86_64: Disable HEST by default</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-9" date="1563537600">- kexec/arm64: Add support for handling zlib compressed (Image.gz) image
- kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
- kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
- kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-10" date="1565006400">- Forward logs in kdump kernel to console directly</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-11" date="1565006401">- Drop switch root capability for non fadump initramfs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12" date="1565352000">- Don't forward and drop journalctl logs for fadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.1" date="1573732800">- Don't execute final_action if failure_action terminates the system
- dracut-module-setup.sh: Don't use squash module for fadump
- Don't mount the dump target unless needed</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.19-12.2" date="1578657600">- arm64: kdump: deal with a lot of resource entries in /proc/iomem
- arm64: kexec: allocate memory space avoiding reserved regions
- kexec: add variant helper functions for handling memory regions</changelog>
</package>
<package pkgid="397a49e6387d0c1dfc3ae2146f121123c615e4b3a7c1fb35e7e1ee5acd983595" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.138" rel="58.el8_1"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.48-52" date="1558440000">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.48-53" date="1558440001">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-53" date="1560513600">- Continued converting the VDO device to conform to the DM convention of
  not issuing I/O while suspended.
  - Resolves: rhbz#1659303
- Added more rate limiting of error logging in both the kvdo and uds
  modules in order to avoid soft-lockups on newer kernels.
  - Resolves: rhbz#1703243
- Eliminated the passing of addresses of unaligned fields in packed
  - Resolves: rhbz#1718058</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-54" date="1561636800">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-55" date="1562932800">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-56" date="1564401600">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.134-56" date="1564747200">- Finished converting the VDO device to conform to the DM convention of not
  issuing I/O while suspended.
- Resolves: rhbz#1659303
- Fixed a bug where crash recovery could use the wrong threads for certain
  operations potentially resulting in memory corruption.
- Resolves: rhbz#1703621
- Fixed a bug which could cause segfaults when running the vdostatus
  command.
- Resolves: rhbz#1669960
- Eliminated a backtrace from the error logged when creating a VDO device
  with an erroneous physical size in the table line.
- Resolves: rhbz#1717435
- Fixed a possible use-after-free of the UDSConfiguration.
- Resolves: rhbz#1653802
- Made VDO a singleton device because multi-segment devices containing a
  VDO have a number of issues.
- Resolves: rhbz#1725077
- Converted the VDO device to conform to the DM convention of not issuing
  writes from the constructor.
- Resolves: rhbz#1669086</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-56" date="1565265600">- Fixed a crash on allocation failure and a use-after-free race introduced by
  the changes to avoid issuing I/O while suspended.
- Resolves: rhbz#1659303</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-57" date="1568376000">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-58" date="1582113600">- Bumped NVR for new 4.18 kernel
- Resolves: rhbz#1805138</changelog>
</package>
<package pkgid="aa77da18b6b56af75dd3390b82c60e1e6e7e828e394b9d8c3459d0d66b1d8c0e" name="kmod-kvdo-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.1.138" rel="58.el8_1"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.48-52" date="1558440000">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.48-53" date="1558440001">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-53" date="1560513600">- Continued converting the VDO device to conform to the DM convention of
  not issuing I/O while suspended.
  - Resolves: rhbz#1659303
- Added more rate limiting of error logging in both the kvdo and uds
  modules in order to avoid soft-lockups on newer kernels.
  - Resolves: rhbz#1703243
- Eliminated the passing of addresses of unaligned fields in packed
  - Resolves: rhbz#1718058</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-54" date="1561636800">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-55" date="1562932800">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.102-56" date="1564401600">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.134-56" date="1564747200">- Finished converting the VDO device to conform to the DM convention of not
  issuing I/O while suspended.
- Resolves: rhbz#1659303
- Fixed a bug where crash recovery could use the wrong threads for certain
  operations potentially resulting in memory corruption.
- Resolves: rhbz#1703621
- Fixed a bug which could cause segfaults when running the vdostatus
  command.
- Resolves: rhbz#1669960
- Eliminated a backtrace from the error logged when creating a VDO device
  with an erroneous physical size in the table line.
- Resolves: rhbz#1717435
- Fixed a possible use-after-free of the UDSConfiguration.
- Resolves: rhbz#1653802
- Made VDO a singleton device because multi-segment devices containing a
  VDO have a number of issues.
- Resolves: rhbz#1725077
- Converted the VDO device to conform to the DM convention of not issuing
  writes from the constructor.
- Resolves: rhbz#1669086</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-56" date="1565265600">- Fixed a crash on allocation failure and a use-after-free race introduced by
  the changes to avoid issuing I/O while suspended.
- Resolves: rhbz#1659303</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-57" date="1568376000">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#1695330</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.1.138-58" date="1582113600">- Bumped NVR for new 4.18 kernel
- Resolves: rhbz#1805138</changelog>
</package>
<package pkgid="a34ae8fbff54cff4877ea5ab7e5b57b7e6e39985818963dcb7613003a434a972" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.2" rel="8.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 3.3.1-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-5" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-1" date="1518091200">- rebase to latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
</package>
<package pkgid="80ce875038be6b77fea8c1ec685e0e94cb409d865e234be5e7be4fdc7f413fa0" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="8.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 3.3.1-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-5" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-1" date="1518091200">- rebase to latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
</package>
<package pkgid="c2f28c98f6ec88a2194385349c03c67a8fc1c2fadc7f5bd62353fefc8e66c611" name="libarchive-debugsource" arch="i686">
  <version epoch="0" ver="3.3.2" rel="8.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 3.3.1-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-5" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-1" date="1518091200">- rebase to latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
</package>
<package pkgid="94194c177cbfcc70cf268a3408dfb40abfa5864c3ed73445f44d1a8c59dc824c" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="8.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 3.3.1-4" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-5" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-1" date="1518091200">- rebase to latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-2" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
</package>
<package pkgid="0465f0408df160c692c35ad9054ee8c4b2d5c7839b0d568eefabb5fab8a6ae20" name="libicu-debuginfo" arch="i686">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="c57b66176a74d0bac2d363b3a0b28ce13a4ccb56f15746cfc3fb626927a49e94" name="libicu-debuginfo" arch="x86_64">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="7f0d2b06e8cd2c44856ad528298284157e95c4dea9f6f452e4c21528f7a19408" name="libicu-devel-debuginfo" arch="i686">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="384a091e17d4923d9ebacf7fdee2836d76b871b09d3eebff426443977a9f7a76" name="libicu-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="60.3" rel="2.el8_1"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.1-1" date="1512043200">- Update to 60.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 60.1-2" date="1513252800">- Resolves: rhbz#1524820 CVE-2017-17484</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 60.2-1" date="1513252801">- Update to 60.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60.2-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-4" date="1527768000">- Add negative-daylight-savings.patch from upstream.
  (see http://bugs.icu-project.org/trac/ticket/13566 and
  http://bugs.icu-project.org/trac/changeset/40954)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.2-5" date="1530187200">- Drop Python2 build dependency, use Python3 instead
- Resolves: rhbz#1595790</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-6" date="1537704000">- Resolves:rh#1602551 - Fix some covscan issues</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 60.2-7" date="1542283200">- Resolves:rh#1602551 - Fix specfile by adding compile options
- also add BuildRequires for gcc and gcc-c++
- Correct the upstream URL</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-1" date="1557230400">- Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
- Resolves: rhbz#1677093</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 60.3-2" date="1583236800">- Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
- Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
- Resolves: rhbz#1808238</changelog>
</package>
<package pkgid="8a582b5c65cf78a320777c9cca9a381ddb8dbadb3cb52e316580c9cab7171e4a" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="b7f2952e0ecc3c18484b32dbe38bd512532ada987eec16c6071d93234610f1ae" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="b1d33775bd970200a3b453fe49a0508f926b83e384f08429a9ca74c271c095dc" name="libnghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="383de033f6ed3fd15b9cc20509762ef991d6a88429f687cb3637eb1ae8e09336" name="libnghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="67232aea221718ad9dc1b7025b1c87c86971a757253fe2f4d354f4765d0f0c5b" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="d56e85187130c64afc4d3184fa2bc5ca3b350b114e5e9eb5adecdb011fb3ed0e" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="524a2fd5ec0bf25f2bcd737c9fd3a2d34a1d0abc26334748781fb5c40b2e7644" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="45dc6a8066c005de166fd77a3c47bcb941dcaecf5c0a999a883f29e134850fa1" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="5e902f83782ba2ce513b7cd3f0c7e24732787f2a582818c4520fd260a4817b62" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="6d3da5375cde4680040bfd161c37557af838bc8ae355356c10e48f3e5fcf3041" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="e4f084fbf7094827561056f0c52c12330af29b639b998b3cdfa5841736bbdf90" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="41d3b62deb3525f195f8e46f3ea8205fde72c1f303843f2010d7e936dd5b2471" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="b43ae98fa6ac4a0f69a76c3feedb737fada3ff02ec21ed23187f3e2e1d824743" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="f5bd2f916bb82049e1ed49e969373240526d72da298d0ede75fcf2abaf4f9f00" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="8d4bfc3c2e64563a55bb057211248facf5cc0e3a72dd75ab480c1c55dc54703b" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="94cb30894f9285240b285b525f66dddf7ca114cbbeff788f5511879d9537230a" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="c102c0c3c321df024121c6f5afb403ce3ee2ec6312841a5e7b5ed44edca6b31c" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="88ec3fcfe3ed9b08bc8f4e29b9ac20819cd7e46732685654a960d5e42e69a024" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="f275f224095a52ff837af03226f436e39d0c314869610b3a330c0accba96223b" name="net-snmp-debugsource" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="262ac1ee4ea652056f229bbf3069b962ac9c9ae246f2c4d998cd752d784eadad" name="net-snmp-debugsource" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="24feb46b31fef6e5b8f9967f3e63ac954be68f86bd3860208b91341ff53ddb34" name="net-snmp-debugsource" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="4ddb949dea58c07292128922ca0d9763b990a24dd4ea8978970683fe1375605c" name="net-snmp-debugsource" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="158f125bc27a7b7cf72cadfb6f3915896e83a17569584a79dd1c43f25fa5eeb9" name="net-snmp-libs-debuginfo" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="88e9f14a6a117129dd5ee57f907a1b940f7af0c8de3484380bcaa3037b3299c0" name="net-snmp-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-12.1" date="1584360000">- fix double free or corruption error caused by freeing security context (#1802055)
- remove deprecated CFLAG</changelog>
</package>
<package pkgid="c80df99c9a8203f70b214fe59c15343552fd410039ddb91ad6a58c838a179697" name="net-snmp-libs-debuginfo" arch="i686">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="8deb4a03a2508fcb505608339bf28261885891a7d03db800d07b0e64a464cb06" name="net-snmp-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.8" rel="12.el8_1"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:5.8-3" date="1536062400">- Change gcc Requires to BuildRequires (#1625189)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-4" date="1537876800">- fix annocheck distro flag failures (#1624151)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-5" date="1538654400">- exit snmpd after snmpd -h command (#1634811)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-6" date="1544011200">- fix discovered issues from coverity scan (#1602630)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-7" date="1549540800">- fix address assigning for IPv6 clientaddr option (#1672668)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-8" date="1557230400">- fix daemon crash on resend request (#1694047)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-9" date="1558699200">- rebuild for autoconf</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-10" date="1561636800">- fix trapsink port issue (#1677192)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-11" date="1571140800">- fix issue with flood messages (#1755359)</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1:5.8-12" date="1571227200">- rebuild to ensure correct disttag (#1755359)</changelog>
</package>
<package pkgid="fa27c27c1cc78912d81c6c0e3992025038e50e19aa7ccee526da79bf6e3b258f" name="nftables-debuginfo" arch="i686">
  <version epoch="1" ver="0.9.0" rel="14.el8_1.1"/>
  <changelog author="Phil Sutter - 1:0.9.0-6" date="1545134400">- Rebuild for updated libnftnl</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-7" date="1545393600">- src: Reject 'export vm json' command</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-8" date="1551441600">- Add missing patch to spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-9" date="1561550400">- Allow variables in jump statement
- Make example configs readable only by root
- Document nft list parameters
- Document vmap statement
- Install netdev-ingress.nft sample config in the right spot
- Backport upstream fixes since last release</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-10" date="1561550401">- Fix typo in spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-11" date="1561550402">- Fix segfault with xtables support</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-12" date="1564574400">- Fix permissions of /etc/nftables directory</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-13" date="1565265600">- Fix for adding a rule with index and set reference</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14" date="1565611200">- src: fix jumps on bigendian arches
- src: json: fix constant parsing on bigendian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14.1" date="1581508800">- monitor: Fix output for ranges in anonymous sets
- monitor: Do not decompose non-anonymous sets</changelog>
</package>
<package pkgid="e38799493e487966bced921fb06a821a35fc2e1cb463e86e931dae40074f815a" name="nftables-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.9.0" rel="14.el8_1.1"/>
  <changelog author="Phil Sutter - 1:0.9.0-6" date="1545134400">- Rebuild for updated libnftnl</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-7" date="1545393600">- src: Reject 'export vm json' command</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-8" date="1551441600">- Add missing patch to spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-9" date="1561550400">- Allow variables in jump statement
- Make example configs readable only by root
- Document nft list parameters
- Document vmap statement
- Install netdev-ingress.nft sample config in the right spot
- Backport upstream fixes since last release</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-10" date="1561550401">- Fix typo in spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-11" date="1561550402">- Fix segfault with xtables support</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-12" date="1564574400">- Fix permissions of /etc/nftables directory</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-13" date="1565265600">- Fix for adding a rule with index and set reference</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14" date="1565611200">- src: fix jumps on bigendian arches
- src: json: fix constant parsing on bigendian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14.1" date="1581508800">- monitor: Fix output for ranges in anonymous sets
- monitor: Do not decompose non-anonymous sets</changelog>
</package>
<package pkgid="db6defb79720ff40c53571998f4c25ac6cccfbc080d6486b88b382d61b2b0481" name="nftables-debugsource" arch="i686">
  <version epoch="1" ver="0.9.0" rel="14.el8_1.1"/>
  <changelog author="Phil Sutter - 1:0.9.0-6" date="1545134400">- Rebuild for updated libnftnl</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-7" date="1545393600">- src: Reject 'export vm json' command</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-8" date="1551441600">- Add missing patch to spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-9" date="1561550400">- Allow variables in jump statement
- Make example configs readable only by root
- Document nft list parameters
- Document vmap statement
- Install netdev-ingress.nft sample config in the right spot
- Backport upstream fixes since last release</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-10" date="1561550401">- Fix typo in spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-11" date="1561550402">- Fix segfault with xtables support</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-12" date="1564574400">- Fix permissions of /etc/nftables directory</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-13" date="1565265600">- Fix for adding a rule with index and set reference</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14" date="1565611200">- src: fix jumps on bigendian arches
- src: json: fix constant parsing on bigendian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14.1" date="1581508800">- monitor: Fix output for ranges in anonymous sets
- monitor: Do not decompose non-anonymous sets</changelog>
</package>
<package pkgid="066d8c8e7507486caf2fa59cffe0bfed5360eb4db807f4bfe9079b8c1e2b160e" name="nftables-debugsource" arch="x86_64">
  <version epoch="1" ver="0.9.0" rel="14.el8_1.1"/>
  <changelog author="Phil Sutter - 1:0.9.0-6" date="1545134400">- Rebuild for updated libnftnl</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-7" date="1545393600">- src: Reject 'export vm json' command</changelog>
  <changelog author="Phil Sutter - 1:0.9.0-8" date="1551441600">- Add missing patch to spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-9" date="1561550400">- Allow variables in jump statement
- Make example configs readable only by root
- Document nft list parameters
- Document vmap statement
- Install netdev-ingress.nft sample config in the right spot
- Backport upstream fixes since last release</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-10" date="1561550401">- Fix typo in spec file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-11" date="1561550402">- Fix segfault with xtables support</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-12" date="1564574400">- Fix permissions of /etc/nftables directory</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-13" date="1565265600">- Fix for adding a rule with index and set reference</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14" date="1565611200">- src: fix jumps on bigendian arches
- src: json: fix constant parsing on bigendian</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1:0.9.0-14.1" date="1581508800">- monitor: Fix output for ranges in anonymous sets
- monitor: Do not decompose non-anonymous sets</changelog>
</package>
<package pkgid="8b77c41f4c42e3ab8a66c2678815c99126c9330cd55752c20683662913e6d56a" name="nghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="22b79b303bb54507c8fb760b5909d539df605afb54c25019f31f293167ad2f6b" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="075067391e66a6c031be61cce6beed597add3a8c2e417b17e26ca571abeef155" name="nghttp2-debugsource" arch="i686">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="fab4aef4868fae4fecb831d38e67f301a0cdcd03b0260293e5128db848c94dd5" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.33.0" rel="1.el8_0.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.29.0-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-1" date="1517832000">- update to the latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.30.0-3" date="1519041600">- add explicit BR for the gcc-c++ compiler</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-1" date="1519732800">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.0-2" date="1521115200">- make fetch-ocsp-response use Python 3</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.31.1-1" date="1523620800">- update to the latest upstream release (fixes CVE-2018-1000168)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.32.0-1" date="1525867200">- update to the latest upstream release</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1" date="1539086400">- use python3 for build
- update to the latest upstream release (#1636992)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.33.0-1.el8_0_0.1" date="1566216000">- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)</changelog>
</package>
<package pkgid="71854673c0507281fe7514cd660a5534b4c8d26e33236da8ba488826d35e7dfa" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="312c31ab1f2d3d46caa51a80d5f9ae29590254ab6a5f6653631877b9fa6484cc" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="28c1814ab83b4857d477d31effa560d71cf452316f33d7d01d7571471a03c38c" name="opencryptoki-debugsource" arch="i686">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="33a47f9475b6a520d59928ccc61c861855c50fba0c8695e6114c5c8e39eaed66" name="opencryptoki-debugsource" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="19d9025dbe367b0e4704f3fddf0fdaa82c029998698effff31dc4bb54df4f6b4" name="opencryptoki-icsftok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="39d2e4a773305997d2186adc27564f7a55f5d4a8ecbdbd3b6b390a3927b2672f" name="opencryptoki-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="a4777cffa581a17169ab956592a16f845360792c83a09a097cc7ce6b45f141af" name="opencryptoki-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="b1a77aa25f1955aedb1ac24c38be2d6bcd4f2254979fe7c043309e9597bfe661" name="opencryptoki-swtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="88106ed33dae1839496ab0ee3c60b660a80bc4f47f98fd088d5444234c7e894b" name="opencryptoki-tpmtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.1" rel="3.el8_1"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.8.2-2" date="1511524800">- use upstream tmpfiles config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-3" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.9.0-1" date="1519387200">- Rebase to 3.9.0</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.10.0-1" date="1528804800">- Rebase to 3.10.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-2" date="1540468800">- Resolves: #1602641, covscan</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10.0-3" date="1544788800">- Resolves: #1657683, can't establish libica token in FIPS mode
- Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1553601600">- Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
- Resolves: #1651731, ep11 token: enhanced IBM z14 functions
- Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
- Resolves: #1525407, use CPACF hashes in ep11 token
- Resolves: #1651238, rebase to 3.11.0
- Resolves: #1682530, gating</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-1" date="1557144000">- Resolves: #1706140, rebase to 3.11.1</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 3.11.1-2" date="1566820800">- Resolves: #1739433, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.1-3" date="1573732800">- Resolves: #1772108, support tolerated new crypto cards</changelog>
</package>
<package pkgid="bc78b0024b40299f41c939b2963b081ed3e99e900c03c1fd2165f84fc52367d4" name="openldap-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="11.el8_1"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.4.46-2" date="1530100800">- Perl 5.28 rebuild
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-3" date="1530705600">- MozNSS Compat. Layer: Make log messages more clear (#1598103)
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-4" date="1530705601">- Remove unused leftover MozNSS Compat. Layer references (#1557967)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.4.46-5" date="1530878400">- Perl 5.28 rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-6" date="1530878401">- Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
- Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.46-7" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-8" date="1539691200">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-9" date="1545048000">- Reference default system-wide CA certificates in manpages (#1611624)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-10" date="1566129600">- Do not fallback to checking CN when no SAN matched (#1740070)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-11" date="1579089600">- Use OpenSSL-1.0.2+ API for host name verification (#1788572)</changelog>
</package>
<package pkgid="b7f4b512cdd6e5f86028902cf1ddfe6b4d316e990518172e35add174601e2af8" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.46" rel="11.el8_1"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.4.46-2" date="1530100800">- Perl 5.28 rebuild
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-3" date="1530705600">- MozNSS Compat. Layer: Make log messages more clear (#1598103)
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-4" date="1530705601">- Remove unused leftover MozNSS Compat. Layer references (#1557967)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.4.46-5" date="1530878400">- Perl 5.28 rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-6" date="1530878401">- Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
- Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.46-7" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-8" date="1539691200">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-9" date="1545048000">- Reference default system-wide CA certificates in manpages (#1611624)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-10" date="1566129600">- Do not fallback to checking CN when no SAN matched (#1740070)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-11" date="1579089600">- Use OpenSSL-1.0.2+ API for host name verification (#1788572)</changelog>
</package>
<package pkgid="a6e117c9498ba64e0d25b548b38ded2769b5b95ad1d7dc1caa97e5f0fcec5a8a" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="11.el8_1"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.4.46-2" date="1530100800">- Perl 5.28 rebuild
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-3" date="1530705600">- MozNSS Compat. Layer: Make log messages more clear (#1598103)
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-4" date="1530705601">- Remove unused leftover MozNSS Compat. Layer references (#1557967)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.4.46-5" date="1530878400">- Perl 5.28 rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-6" date="1530878401">- Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
- Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.46-7" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-8" date="1539691200">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-9" date="1545048000">- Reference default system-wide CA certificates in manpages (#1611624)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-10" date="1566129600">- Do not fallback to checking CN when no SAN matched (#1740070)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-11" date="1579089600">- Use OpenSSL-1.0.2+ API for host name verification (#1788572)</changelog>
</package>
<package pkgid="3af1e683769d41608f1c9c05d317db44e8ecc21af7797732674e1ec395a35c0b" name="openldap-debugsource" arch="i686">
  <version epoch="0" ver="2.4.46" rel="11.el8_1"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.4.46-2" date="1530100800">- Perl 5.28 rebuild
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-3" date="1530705600">- MozNSS Compat. Layer: Make log messages more clear (#1598103)
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-4" date="1530705601">- Remove unused leftover MozNSS Compat. Layer references (#1557967)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.4.46-5" date="1530878400">- Perl 5.28 rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-6" date="1530878401">- Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
- Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.46-7" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-8" date="1539691200">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-9" date="1545048000">- Reference default system-wide CA certificates in manpages (#1611624)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-10" date="1566129600">- Do not fallback to checking CN when no SAN matched (#1740070)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-11" date="1579089600">- Use OpenSSL-1.0.2+ API for host name verification (#1788572)</changelog>
</package>
<package pkgid="52af3c131053163531312e9a76886e881fd145e270852ef74f96624b1c5d5f63" name="openldap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="11.el8_1"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.4.46-2" date="1530100800">- Perl 5.28 rebuild
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-3" date="1530705600">- MozNSS Compat. Layer: Make log messages more clear (#1598103)
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-4" date="1530705601">- Remove unused leftover MozNSS Compat. Layer references (#1557967)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.4.46-5" date="1530878400">- Perl 5.28 rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-6" date="1530878401">- Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
- Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.46-7" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-8" date="1539691200">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-9" date="1545048000">- Reference default system-wide CA certificates in manpages (#1611624)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-10" date="1566129600">- Do not fallback to checking CN when no SAN matched (#1740070)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.46-11" date="1579089600">- Use OpenSSL-1.0.2+ API for host name verification (#1788572)</changelog>
</package>
<package pkgid="2c9b157298866bc43a4ffed438c9453714088daa075fd82b6d3697ffa34d128e" name="openssh-cavs-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="4e1c7a8e4a0fe43005fb1c31be983e8585a17eda4a4ff1bb18c5ebfdc534872e" name="openssh-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="92b032aa9b778a873eb926362baba2f75bff668c4fc85aa2d8eb938b8e858c0e" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="404702b69abdef8d5ec84f105660c8dec13e36c65fd285682b568be312fba5f8" name="openssh-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="a99aac94c127cecaac654607880d79bb954950383b3fb3333ed2d7c9363dbc18" name="openssh-keycat-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="eb5798e4aac1122dd5aadb599528347c80f0257cc609948479ca71d6ad02c614" name="openssh-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="c61bbba315f117f581fe6626b3d60568084f73e8461b2ac4ff8428425606cf37" name="openssh-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="c8e660a681d52c0aec4b31c692ee5874eae977f18b207caf8de7873235c6552e" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="c6d371df10091a3398eb6656a3abd7f4577e2305616f75029b7acda9bd58c932" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="4d6562487afb312a75b10bfef709923f7c8b5aec08b3a14299d0947ec0cad9a6" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="9d9928d4d04ce61d28b1ef7c61965742cec36e99aec2a67688a707cf013e4e11" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="270a245ccd053d35e70ee2e8b0532c09c74709ca601c619c4a217635c0c4984d" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="523d4ecd8a559047456832cd97e827f359bdd8e69b6304e6102ebf687d7445de" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1c" rel="2.el8_1.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-6" date="1539604800">- make SECLEVEL=3 work</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-7" date="1542196800">- use /dev/urandom for seeding the RNG in FIPS POST</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-8" date="1544788800">- make openssl ts default to using SHA256 digest</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-1" date="1557230400">- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-3" date="1557230401">- FIPS compliance fixes</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-5" date="1557489600">- Fix small regressions related to the rebase</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1b-6" date="1558699200">- adjust the default cert pbe algorithm for pkcs12 -export
  in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-1" date="1559563200">- update to the 1.1.1c release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2" date="1561377600">- do not try to use EC groups disallowed in FIPS mode
  in TLS
- fix Valgrind regression with constant-time code</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1c-2.1" date="1583409600">- add selftest of the RAND_DRBG implementation
- fix incorrect error return value from FIPS_selftest_dsa</changelog>
</package>
<package pkgid="3f8913adc37e0dff8d8582150ce2b5d8616f2fb6b2466bea4c2d3867c11bf189" name="pam_ssh_agent_auth-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="7.4.el8_1"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-4 + 0.10.3-4" date="1530100800">- Better handling of kerberos tickets storage (#1566494)
- Add pam_motd to pam stack (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-5 + 0.10.3-4" date="1530619200">- Disable manual printing of motd by default (#1591381)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.7p1-6 + 0.10.3-4" date="1533816000">- Fix listing of kex algoritms in FIPS mode
- Allow aes-gcm cipher modes in FIPS mode
- Coverity fixes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-2 + 0.10.3-5" date="1535716800">- New upstream release fixing CVE 2018-15473
- Remove unused patches
- Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
- Address coverity issues
- Unbreak scp between two IPv6 hosts (#1620333)
- Unbreak GSSAPI key exchange (#1624323)
- Unbreak rekeying with GSSAPI key exchange (#1624344)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-3 + 0.10.3-5" date="1537790400">- Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
- Ignore unknown parts of PKCS#11 URI (#1631478)
- Do not fail with GSSAPI enabled in match blocks (#1580017)
- Fix the segfaulting cavs test (#1629692)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.8p1-4 + 0.10.3-5" date="1543233600">- Unbreak PKCS#11 URI tests (#1648262)
- Allow to disable RSA signatures with SHA1 (#1648898)
- Dump missing GSS options from client configuration (#1649505)
- Minor fixes from Fedora related to GSSAPI and keberos
- Follow the system-wide PATH settings</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-1 + 0.10.3-7" date="1557835200">- New upstream release (#1691045)
- Remove support for unused VendorPatchLevel configuration option
- Fix kerberos cleanup procedures (#1683295)
- Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
- Several GSSAPI key exchange improvements and sync with Debian
- Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
- Do not fall back to sshd_net_t SELinux context (#1678695)
- Use FIPS compliant high-level signature OpenSSL API and KDF
- Mention crypto-policies in manual pages
- Do not fail if non-FIPS approved algorithm is enabled in FIPS
- Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-2 + 0.10.3-7" date="1560340800">- Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
- Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-3 + 0.10.3-7" date="1563883200">- Fix typos in manual pages (#1668325)
- Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
- Unbreak ssh-keygen -A in FIPS mode (#1732424)
- Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 8.0p1-4 + 0.10.3-7" date="1578484800">- Restore entropy patch for CC certification (#1785655)</changelog>
</package>
<package pkgid="63c24ba5ff3bd8f328544b7eac6765db3543d2a89468a1b55b4b17e6c85b85a4" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="9402babdd4701e5c6c3bd0a47b910a7c93ca8cbc96035a6a10c4d0013882eb5b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="92bce042d215e21929732059b19fdecf72dd97d09010b83c4f12a38feb4d4cdc" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="fa03c2303048abf284d98bf87d5c3fc53e5cc54068a209a6460859c8a3cd9ad1" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="ec98ad71d407e49c6d516b821c964e4d39ad8bf0c2cd70425534435c0bb385ad" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="6235035dd5baba8a08f01a0128bdb7dde419da07f44c5e469de6fd69c597bfee" name="policycoreutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="276aad6f32d5f90bbcbf5acfe24093da80df18a07d648e71c6440e075efabfff" name="policycoreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="916e8956145e45c08af22993344800d184d692ee1ce1c8a122b0d23899c800be" name="policycoreutils-debugsource" arch="i686">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="91b5e3a353281d7a7547c3233df8455bd15a63c9b1e0fa0d4f58a6e5c4956980" name="policycoreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="301c90767a89a8746bfeffb4e8cfe778422c43e2bc13a834727f42fe9006535d" name="policycoreutils-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="ece7fd250037d2ea47276bfb11dff1337ae38b08cccc3fec2fa2fcd3f65df8aa" name="policycoreutils-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="6db3317df1c0e708fd407c203e902ae24090145113fbc8dda0a6a627a57b9689" name="policycoreutils-newrole-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="cdca5912f0a187e693cc223e738c6e41ccee47d15980d9ca88ad0109cdc6fc18" name="policycoreutils-restorecond-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.el8_1.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-11.1" date="1541678400">- Fix RESOURCE_LEAK coverity scan defects</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-12" date="1542110400">- Handle more reserved port types
- Replace aliases with corresponding type names</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-13" date="1543838400">- Use ipaddress module instead of IPy</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-14" date="1543924800">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-15" date="1544011200">- chcat: use check_call instead of getstatusoutput
- semanage: Use standard argparse.error() method
- semanage: Fix handling of -a/-e/-d/-r options</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-16.1" date="1544788800">- semanage: move valid_types initialisations to class constructors
- semanage: import sepolicy only when it's needed
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: Start exporting "ibendport" and "ibpkey" entries</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-2" date="1562068800">- Update transition
- fixfiles: Fix [-B] [-F] onboot</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1566475200">- fixfiles: Fix unbound variable problem (#1743213)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-3.1" date="1575028800">- Configure autorelabel service to output to journal and to console if set (#1766578)</changelog>
</package>
<package pkgid="85306acee9edc0fb1d4dd9198d57f7ff7d21cdf5f7443f0b10cd55d34ee9ebd9" name="ppp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="26.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.4.7-17" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-18" date="1522152000">- Used openssl for the DES instead of the libcrypt / glibc
  Resolves: rhbz#1556132</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-19" date="1522843200">- Build with distro's LDFLAGS
  Resolves: rhbz#1563157</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-20" date="1523016000">- Also build all DSOs with distro's LDFLAGS
  Related: rhbz#1563157</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-21" date="1523275200">- Link with -E not to break plugins
  Resolves: rhbz#1564459</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-22" date="1528200000">- Updated EAP-TLS patch to v1.101
  Resolves: CVE-2018-11574</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-23" date="1529496000">- Replaced initscripts requirement by the network-scripts
  Resolves: rhbz#1610285</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-24" date="1542715200">- Split out the network-scripts
  Resolves: rhbz#1608377</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-25" date="1543924800">- Fixed some issues found by coverity scan
  Resolves: rhbz#1602665</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-26" date="1582632000">- Fixed buffer overflow in the eap_request and eap_response functions
  Resolves: CVE-2020-8597</changelog>
</package>
<package pkgid="543ad4b50c7c95a8a6dace15227189e3cfd1f5d857bde79787aa0061b2450c7d" name="ppp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="26.el8_1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.4.7-17" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-18" date="1522152000">- Used openssl for the DES instead of the libcrypt / glibc
  Resolves: rhbz#1556132</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-19" date="1522843200">- Build with distro's LDFLAGS
  Resolves: rhbz#1563157</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-20" date="1523016000">- Also build all DSOs with distro's LDFLAGS
  Related: rhbz#1563157</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-21" date="1523275200">- Link with -E not to break plugins
  Resolves: rhbz#1564459</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-22" date="1528200000">- Updated EAP-TLS patch to v1.101
  Resolves: CVE-2018-11574</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-23" date="1529496000">- Replaced initscripts requirement by the network-scripts
  Resolves: rhbz#1610285</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-24" date="1542715200">- Split out the network-scripts
  Resolves: rhbz#1608377</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-25" date="1543924800">- Fixed some issues found by coverity scan
  Resolves: rhbz#1602665</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.7-26" date="1582632000">- Fixed buffer overflow in the eap_request and eap_response functions
  Resolves: CVE-2020-8597</changelog>
</package>
<package pkgid="81d20c17127146b09152c59a110d9cf800781b12bba43f3bd92af50d7a09c19c" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="f483364e16e89b8c62d2d765ec5f246a20993a27f64acab529f3f89aebb0f58f" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="ebe485ed3361f477d04e0336be608d63d2c59eea92cd68352596a4126035b9db" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.2.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-139.el8]" date="1566907200">- [char] ipmi: move message error checking to avoid deadlock (Tony Camuso) [1731388 1718699]
- [crypto] crypto: testmgr - mark crc32 checksum as FIPS allowed (Neil Horman) [1738887]
- [include] dma-mapping: use dma_get_mask in dma_addressing_limited (Don Dutile) [1738631]
- [kernel] dma-direct: correct the physical addr in dma_direct_sync_sg_for_cpu/device (Don Dutile) [1738631]
- [kernel] dma-direct: only limit the mapping size if swiotlb could be used (Don Dutile) [1738631]
- [include] dma-mapping: add a dma_addressing_limited helper (Don Dutile) [1738631]
- [kernel] dma-direct: Force unencrypted DMA under SME for certain DMA masks (Don Dutile) [1738631]
- [lib] lib/genalloc: introduce chunk owners (Don Dutile) [1738631]
- [lib] lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations (Don Dutile) [1738631]
- [lib] lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk (Don Dutile) [1738631]
- [include] dma-mapping: remove dma_max_pfn (Don Dutile) [1738631]
- [mmc] mmc: core: let the dma map ops handle bouncing (Don Dutile) [1738631]
- [mmc] mmc: core: align max segment size with logical block size (Don Dutile) [1738631]
- [kernel] swiotlb: no need to check return value of debugfs_create functions (Don Dutile) [1738631]
- [xen] swiotlb: fix phys_addr_t overflow warning (Don Dutile) [1738631]
- [kernel] swiotlb: Return consistent SWIOTLB segments/nr_tbl (Don Dutile) [1738631]
- [kernel] swiotlb: Group identical cleanup in swiotlb_cleanup() (Don Dutile) [1738631]
- [kernel] swiotlb: save io_tlb_used to local variable before leaving critical section (Don Dutile) [1738631]
- [kernel] swiotlb: dump used and total slots when swiotlb buffer is full (Don Dutile) [1738631]
- [kernel] swiotlb: add checks for the return value of memblock_alloc*() (Don Dutile) [1738631]
- [kernel] swiotlb: add debugfs to track swiotlb buffer usage (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NO_KERNEL_MAPPING in common code (Don Dutile) [1738631]
- [kernel] dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING for remapped allocations (Don Dutile) [1738631]
- [kernel] dma-mapping: remove a pointless memset in dma_atomic_pool_init (Don Dutile) [1738631]
- [kernel] dma-mapping: fix lack of DMA address assignment in generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-remap: support DMA_ATTR_NO_KERNEL_MAPPING (Don Dutile) [1738631]
- [kernel] dma-mapping: support highmem in the generic remap allocator (Don Dutile) [1738631]
- [kernel] dma-direct: handle DMA_ATTR_NON_CONSISTENT in common code (Don Dutile) [1738631]
- [kernel] dma-mapping: add a dma_alloc_need_uncached helper (Don Dutile) [1738631]
- [kernel] dma-mapping: truncate dma masks to what dma_addr_t can hold (Don Dutile) [1738631]
- [kernel] dma-remap: Avoid de-referencing NULL atomic_pool (Don Dutile) [1738631]
- [include] dma-buf: add DMA_BUF_SET_NAME ioctls (Don Dutile) [1738631]
- [include] dma-buf: give each buffer a full-fledged inode (Don Dutile) [1738631]
- [fs] new wrapper: alloc_file_pseudo() (Don Dutile) [1738631]
- [kernel] dma-direct: provide generic support for uncached kernel segments (Don Dutile) [1738631]
- [include] dma-contiguous: fix !CONFIG_DMA_CMA version of dma_{alloc, free}_contiguous() (Don Dutile) [1738631]
- [kernel] dma-contiguous: use fallback alloc_pages for single pages (Don Dutile) [1738631]
- [kernel] dma-contiguous: add dma_{alloc,free}_contiguous() helpers (Don Dutile) [1738631]
- [iommu] iommu/dma: Fix condition check in iommu_dma_unmap_sg (Don Dutile) [1738631]
- [iommu] iommu/dma: move the arm64 wrappers to common code (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu.c: convert to use vm_map_pages() (Don Dutile) [1738631]
- [mm] mm: introduce new vm_map_pages() and vm_map_pages_zero() API (Don Dutile) [1738631]
- [mm] arm64/iommu: handle non-remapped addresses in -&gt;mmap and -&gt;get_sgtable (Don Dutile) [1738631]
- [arm64] arm64/mm: wire up CONFIG_ARCH_HAS_SET_DIRECT_MAP (Don Dutile) [1738631]
- [kernel] mm/hibernation: Make hibernation handle unmapped pages (Don Dutile) [1738631]
- [mm] page_poison: play nicely with KASAN (Don Dutile) [1738631]
- [mm] mm/vmalloc: Avoid rare case of flushing TLB with weird arguments (Don Dutile) [1738631]
- [mm] mm/vmalloc: Fix calculation of direct map addr range (Don Dutile) [1738631]
- [mm] mm/vmalloc: Add flag for freeing of special permsissions (Don Dutile) [1738631]
- [x86] x86/mm/cpa: Add set_direct_map_*() functions (Don Dutile) [1738631]
- [arm64] dma-mapping: add a kconfig symbol for arch_setup_dma_ops availability (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove the flush_page callback (Don Dutile) [1738631]
- [include] iommu/dma: Cleanup dma-iommu.h (Don Dutile) [1738631]
- [dma] dmaengine: Add matching device node validation in __dma_request_channel() (Don Dutile) [1738631]
- [dma] dmaengine: dma_request_chan_by_mask() to handle deferred probing (Don Dutile) [1738631]
- [include] dma-buf: start caching of sg_table objects v2 (Don Dutile) [1738631]
- [kernel] dma-mapping: add a Kconfig symbol to indicate arch_dma_prep_coherent presence (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Remove iommu_dma_map_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/ls-scfg-msi: Don't map the MSI page in ls_scfg_msi_compose_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-mbi: Don't map the MSI page in mbi_compose_m{b, s}i_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gicv2m: Don't map the MSI page in gicv2m_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Don't map the MSI page in its_irq_compose_msi_msg() (Don Dutile) [1738631]
- [irqchip] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (Don Dutile) [1738631]
- [iommu] iommu/dma-iommu: Split iommu_dma_map_msi_msg() in two parts (Don Dutile) [1738631]
- [iommu] iommu/dma: Remove unused variable (Don Dutile) [1738631]
- [iommu] iommu/dma: Use NUMA aware memory allocations in __iommu_dma_alloc_pages() (Don Dutile) [1738631]
- [kernel] genirq/msi: Add a new field in msi_desc to store an IOMMU cookie (Don Dutile) [1738631]
- [pci] PCI/MSI: Remove unused mask_msi_irq() and unmask_msi_irq() (Don Dutile) [1738631]
- [include] PCI/MSI: Remove unused __write_msi_msg() and write_msi_msg() (Don Dutile) [1738631]
- [include] genirq/msi: Clean up usage of __u8/__u16 types (Don Dutile) [1738631]
- [base] platform-msi: Free descriptors in platform_msi_domain_free() (Don Dutile) [1738631]
- [base] genirq/msi: Allow creation of a tree-based irqdomain for platform-msi (Don Dutile) [1738631]
- [kernel] dma-debug: only skip one stackframe entry (Don Dutile) [1738631]
- [dma] dmaengine: idma64: Move driver name to the header (Don Dutile) [1738631]
- [kernel] dma-mapping: remove an unnecessary NULL check (Don Dutile) [1738631]
- [include] dma-buf: Update [un]map documentation to match the other functions (Don Dutile) [1738631]
- [include] dma-buf: Remove leftover [un]map_atomic comments (Don Dutile) [1738631]
- [x86] x86/dma: Remove the x86_dma_fallback_dev hack (Don Dutile) [1738631]
- [kernel] dma-mapping: remove leftover NULL device support (Don Dutile) [1738631]
- [kernel] dma: select GENERIC_ALLOCATOR for DMA_REMAP (Don Dutile) [1738631]
- [crypto] crypto: ccp - Ignore unconfigured CCP device on suspend/resume (Gary Hook) [1743999]
- [md] dm snapshot: fix oversights in optional discard support (Mike Snitzer) [1744291]
- [md] dm snapshot: add optional discard support features (Mike Snitzer) [1744291]
- [md] dm snapshot: Use fine-grained locking scheme (Mike Snitzer) [1744291]
- [md] dm snapshot: Make exception tables scalable (Mike Snitzer) [1744291]
- [md] dm snapshot: Replace mutex with rw semaphore (Mike Snitzer) [1744291]
- [md] dm snapshot: Don't sleep holding the snapshot lock (Mike Snitzer) [1744291]
- [include] list_bl: Add hlist_bl_add_before/behind helpers (Mike Snitzer) [1744291]
- [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1741643]
- [firmware] firmware/efi: Add NULL pointer checks in efivars API functions (Jarod Wilson) [1741949]
- [fs] ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls (Miklos Szeredi) [1724518]
- [include] mm: page_cache_add_speculative(): refactor out some code duplication (Michael Petlan) [1738331]
- [netdrv] ibmvnic: Unmap DMA address of TX descriptor buffers after use (Steve Best) [1743155]
- [fs] NFSv4.1 don't free interrupted slot on open (Steve Dickson) [1708345]
- [fs] NFSv4.1: Avoid false retries when RPC calls are interrupted (Steve Dickson) [1708345]
- [net] ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (Stefano Brivio) [1743203]
- [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1719418]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
</package>
<package pkgid="121f46b62014a6ee05ea304e8a49ea2a69f86bbea1a907594d77a2ec1a080cf9" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-140.el8]" date="1567080000">- [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1728519]
- [scsi] scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Himanshu Madhani) [1690041]
- [scsi] qla2xxx: Update driver version to 10.01.00.15.08.1-k1 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Complain loudly about reference count underflow (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set the SCSI command result before calling the command done (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: on session delete, return nvme cmd (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Set remote port devloss timeout to 0 (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1690041]
- [scsi] scsi: qla2xxx: Fix fw dump corruption (Himanshu Madhani) [1690041]
- [x86] kvm: disable nested virt on pre-haswell processors (Paolo Bonzini) [1739739]
- [x86] kvm: taint kernel for tech-preview when using nested virtualization (Paolo Bonzini) [1739739]
- [x86] kvm: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled (Vitaly Kuznetsov) [1746100]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
</package>
<package pkgid="55d03512a5bc8639eaac8f738a35a15d6f23db00206bcbaf11365dccac6ed119" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.3.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
</package>
<package pkgid="05fc3250a9c37d1cfb1312b87171cc06481b91255d5ae7813d0de3ffe4be197c" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.5.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
</package>
<package pkgid="d27d9e3856b3a3526f2e6db05157f1ecc69af405782308c33e9ab715659758ec" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el8_1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="dbb5b9488c6fe3f449be89706dc156280aa927abb099e83c33c8ca9a9989b446" name="python3-rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="23df32145d656126fa901379691db02a52f067dd2be3cadd4d4e7abdb9d3aa2d" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="e5159a77ed010d2e4d0b7f9fd4c9887e4b5749ed2d6e90e05f3dc003bcbbb23e" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="c0ac3bed7ad7286c78cdc52c805cca40a5613ba81d885b76a0ef11daa9f34c63" name="rpm-build-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="8d5bbd4efe647fd7ba24076844e90e4a1aa1a07e9dc7f335ff949da81f5c3ac1" name="rpm-build-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="2a1dfdb55714cd87225cff6fb6834f0aa926d1653213947a8f55f3d2543424e3" name="rpm-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="7aced353a2dbb7fc02f58f41826a10d2277da62e78506525257381706f092491" name="rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="df350eaf8274e9667fec93be1d9160931e29ae4286f3cbf16f8d140763766062" name="rpm-debugsource" arch="i686">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="9a8dda0c09a1fb49b1d98160370aa1d48eb81c34c9d8105fe074c90058c34f9b" name="rpm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="44f5e09b0982639a896e510fdee5df5492bddbb022dd04c0f670a3edbaa0b687" name="rpm-devel-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="eeb6fd269d2b9561fed9f7b5e7c8bdda452903e0496ba48a624ddeebc9a85c55" name="rpm-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="2179a9eca2322caf76ee39105686a20924340d8e5d8c4b61cbfac683f89980e7" name="rpm-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="ab5a9aaa8d84a5a4f93c29e651813c84fa7555cc8a75f8de7e0c2cf9deb31c6e" name="rpm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="21a6f410bc1137b069d6fe5a9fbc76033589abca16b8848a4eeb9e443b217709" name="rpm-plugin-ima-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="1e1a8b2b39bc4259c1fddfab48941ac7c50dea05331b4b8e4e43e7d0d8a74ee6" name="rpm-plugin-prioreset-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="455557dc8495c42dfd416029ffdce5c0b7e027a8c8b1276dd8c0ca69642e1ca5" name="rpm-plugin-selinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="b39b79701131ddc321ccb1396771efd2e599887e0875c625b319b5a222afd190" name="rpm-plugin-syslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="81975a601b53a49fc5349a0bf41087bc7e7efa6a03e0e6d3d77affcf780ce70d" name="rpm-plugin-systemd-inhibit-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="1e944dd551b77ea45a16ac63afb411dafd85506e1efda95cc72be67f470366e5" name="rpm-sign-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.2" rel="26.el8_1"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-17" date="1556107200">- Add flag to use strip -g instead of full strip on DSOs (#1689810)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-18" date="1559649600">- Make use of unversioned %__python macro an error (#1645663)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-19" date="1559649601">- Fix rare segfault in fingerprinting symlink round (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-20" date="1559822400">- Fix packages getting removed on failed update via dnf (#1710346)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-21" date="1562155200">- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-22" date="1563451200">- Add information about FIPS mode to rpmsign man page (#1726678)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-23" date="1564056000">- Use --dpbath only with full path (#1696408)
- Fix memory leaks (#1714657)
- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
- Fix bash warning from solution for #1689810</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-24" date="1564574400">- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 4.14.2-25" date="1565179200">- Fix memory leak in verify code (#1714657)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.14.2-26" date="1579003200">- Revert DBUS-shutdown patch, it causes regressions (#1790794)</changelog>
</package>
<package pkgid="f01827346829e7fc3374e1cdc40fdaad2cd5caebfaf27324efa93417db9de5d3" name="sqlite-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="b7d47a4281d081d11427e9f0c1f1d52d281e81671e757d66fa5ad8caa1649194" name="sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="8b0ab385158138988b6f8c8e7945fddf1135e33093bd564a848f2336515dc748" name="sqlite-debugsource" arch="i686">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="9c9689f49afbc37559afc44d35ae5af0efa6068820ee473da9717485ead03cc6" name="sqlite-debugsource" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="294b9a0ec67ccac5319bcef65c5f336f3ad74bb64379833dee2220901c8e41d4" name="sqlite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="6e23a01d10288f2326c46a7c5a195a587a84e879cec10cba9ad761f636d08b84" name="sqlite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="4.el8_1"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-2" date="1517832000">- Fixed issue with some walro2 tests failing on ppc64</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.22.0-3" date="1518177600">- Use LDFLAGS from redhat-rpm-config for building lemon, too</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.22.0-4" date="1521633600">- Fixed CVE-2018-8740 (#1558809)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.0-1" date="1522756800">- Updated to version 3.23.0 (https://sqlite.org/releaselog/3_23_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.23.1-1" date="1523448000">- Updated to version 3.23.1 (https://sqlite.org/releaselog/3_23_1.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.24.0-1" date="1528200000">- Updated to version 3.24.0 (https://sqlite.org/releaselog/3_24_0.html)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-1" date="1545048000">- Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
  Fixes fts3/4 corrupt database exploit (#1659684)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-2" date="1546516800">- Add explicit sqlite-libs requires to tcl and devel subpackages</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-3" date="1546516801">- Rebuild to pick up latest test sources by the CI</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-4" date="1577966400">- Fixed CVE-2019-13734 (#1786508)</changelog>
</package>
<package pkgid="6da469b631a713ce1a17475b5942be00b86e44394ee9c16b929e6a4742147df4" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="51de3e785b1a7d23ec255aca31dbf3c055dbf9bcde3bb9dcd8b49d007010eb54" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="8902ba569ab1fe5c075ec5431f6dee22c8503a222a910ae71f85657b84896b7e" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="3a0bcc48a347c39de7fe3b370d58d8f2d72de901de7a09707f61813f5f2c0780" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="2f3e447a0ecd158ec79741e960d3dd80f3ff709f57712f758417f06559740a9d" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="97d1fc7cff89599c5458b73371f905c9be1dd79b4f5f2bccecd0e843fdaa29d8" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="183097e0723dfbe7bd102d71e96580b3c2252fcaae94c97de335ce4722c5ab92" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="0542bdfc8f36527cee4543ccb13c2c74ea9e9cf8ba8f9891356bf896b439a8a9" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="76aef7823770ad9dc36066ff7142604b47b5f3fe9a58a179c71a0642d34c9f7a" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="9bc75b7f4ee4d239b6ae2673554397e996130de9fb1d73acd519cbc7b2b3018f" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="cf8693a8dc10d67001f18236db012861059559d61728663525445afec097080c" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="67e23c2bfc1a588d13f898974ce91933f1598f9e665cddcda55408c4efde8ad3" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="acd946b71d6571dfcec77cb62d02686dc33a365cdba49dc29fabc9edc54c342e" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="cdc99b259655599a43cbdc90626053859a19b1eb38706e2e5c22be4af4afd8ca" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="19b177a6d1b1d530d5a1f23129ce368a48899e491feb39dfca438210f4b7dd40" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="020c05da3e793cd7cbeae68a3be9bb0043b8e8bea903f0fa9cb746eea3ba37e5" name="sssd-libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="b1cd094ff5457dccf7d0f6db53e2bb1d3f9d731b9cf85407666981b93dbe82fe" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="f3b047723f6d5e99dcef6c6471a6efc3061af75bcf2c9d3ec5e4c18518284fad" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="f1989c63a35daf0c5ee6929f66c7b797d7c60b34191b942b6e8f6054ce28758c" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="1e611db11e015656e1937361b8d35cb5e90fa1bae84ab53665e1c9c0d2e6bbce" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="19.el8_1.1"/>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-11" date="1565352000">- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-12" date="1566129600">- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-13" date="1566129601">- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-14" date="1566129602">- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                           should not cause files domain entries to be
                           qualified, this can break sudo access</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-15" date="1566129603">- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-16" date="1566129604">- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-17" date="1567339200">- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-18" date="1567339201">- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 2.2.0-19" date="1567598400">- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.2.0-19.1" date="1585051200">- Resolves: rhbz#1816591 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module does not
                           implement it properly [rhel-8.1.0.z]</changelog>
</package>
<package pkgid="7550cd4007bccda75edd9af9a3037cff706942572b41e28ea015435d5601c7e8" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.25p1" rel="8.el8_1.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-2" date="1536580800">- install /etc/dnf/protected.d/sudo instead of /etc/yum/protected.d/sudo
  resolves: rhbz#1626972</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-1" date="1537963200">- rebase to the new upstream version 1.8.25p1
- sync patches with rhel-7.6
- sync sudoers with rhel-7.6
  resolves: rhbz#1633144</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.25-2" date="1539259200">- Depend explicitly on /usr/sbin/sendmail instead of sendmail (rhel-7 sync)
- Simplified pam configuration file by removing duplicate pam stack entries
Resolves: rhbz#1633144</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.25-3" date="1539345600">- bump release for new build
Resolves: rhbz#1625683</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-4" date="1544529600">- Fix most of the man page scans problems
- Resolves: rhbz#1613327</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-5" date="1559044800">- RHEL 8.1 ERRATUM
- Fixed problem with sudo-1.8.23 and 'who am i'
Resolves: rhbz#1673886
- Backporting sudo bug with expired passwords
Resolves: rhbz#1676819</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-6" date="1565611200">- RHEL 8.1 ERRATUM
- Fixed The LDAP backend which is not properly parsing sudoOptions,
  resulting in selinux roles not being applied
Resolves: rhbz#1738326</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-7" date="1565956800">- RHEL 8.1 ERRATUM
- sudo ipa_hostname not honored
Resolves: rhbz#1738662</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; - 1.8.25p1-8" date="1571400000">- RHEL-8.1.0
- fixed CVE-2019-14287
  Resolves: rhbz#1760696</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25p1-8.1" date="1580904000">- RHEL 8.1.0.Z ERRATUM
- CVE-2019-18634
Resolves: rhbz#1798092</changelog>
</package>
<package pkgid="4b68644be40b2b52b22ec3bcb468fed330c2df5840864bb9ab4d7a8c8a48b678" name="sudo-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.25p1" rel="8.el8_1.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-2" date="1536580800">- install /etc/dnf/protected.d/sudo instead of /etc/yum/protected.d/sudo
  resolves: rhbz#1626972</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-1" date="1537963200">- rebase to the new upstream version 1.8.25p1
- sync patches with rhel-7.6
- sync sudoers with rhel-7.6
  resolves: rhbz#1633144</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.25-2" date="1539259200">- Depend explicitly on /usr/sbin/sendmail instead of sendmail (rhel-7 sync)
- Simplified pam configuration file by removing duplicate pam stack entries
Resolves: rhbz#1633144</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.25-3" date="1539345600">- bump release for new build
Resolves: rhbz#1625683</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-4" date="1544529600">- Fix most of the man page scans problems
- Resolves: rhbz#1613327</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-5" date="1559044800">- RHEL 8.1 ERRATUM
- Fixed problem with sudo-1.8.23 and 'who am i'
Resolves: rhbz#1673886
- Backporting sudo bug with expired passwords
Resolves: rhbz#1676819</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-6" date="1565611200">- RHEL 8.1 ERRATUM
- Fixed The LDAP backend which is not properly parsing sudoOptions,
  resulting in selinux roles not being applied
Resolves: rhbz#1738326</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-7" date="1565956800">- RHEL 8.1 ERRATUM
- sudo ipa_hostname not honored
Resolves: rhbz#1738662</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; - 1.8.25p1-8" date="1571400000">- RHEL-8.1.0
- fixed CVE-2019-14287
  Resolves: rhbz#1760696</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25p1-8.1" date="1580904000">- RHEL 8.1.0.Z ERRATUM
- CVE-2019-18634
Resolves: rhbz#1798092</changelog>
</package>
<package pkgid="08138b5b542b8fce79618a1b956da5958bd6061053c14f9065feffc4422c8170" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="cef23286393e47c9c3b2c477655b61a328d3e4556a66f0ca5284554b3e416daa" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="6ddd70bc221abb80d6f089bbb490902a272de5df72ebcdc0229f2f469758f7ff" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="8ac8783cdeb4ac748b844af6c0b9e73d2e937c30ed8a1e7026390e8d35e782bb" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="55c32a8eee6cd1ed48e58c7bb58e6a7ae554038624f4d8aa176f2b4ef0e5a7a9" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="cd4c778009c14b6d798e3ad91358b46d4db12980f4f95d77408de3ad9a24ff7b" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="8e457c829f11b1eb99ffee843f2213bf2dd1897333d307e7231ebd1af0ced824" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="cdee2e41d737f0134063377165dd6133f922f2c111413efbaaa06e276d0737f5" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="149d8cc550cf727db59a1696d77b34a3b927fb3a4c73a30e6568a69038fcdb5f" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="cb0f84f4ad1e654062807a8d5ef7fbeb1985d2b003041942aabb56461a36d74a" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="60f425a22c174b43384668969160bf2488dcb113c71bd4e65c13e853d3b6e9a9" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="7a6e490160b4788911560ab46beaab84a48dc68747d8a3c5d25a3f1a4fe74c81" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="33f925037c62a961db05cc068f97558bcbd106cc3701fcb7654d62af9b327b20" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="77af52bcb190d164c42780a254fc1460a607babb1a55e2d08d1eafae615d4218" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="6d20396667902d52d6c609e6942f1934f00c90dc9727b3c60058e06b54826350" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="1750056268a5226d1c56e551ece095ee4273e679fe8275d55df5fd25a40fa517" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="353c49dcf7ca1a6a75c895804fa9dff5be1eba4fab7be928d46db5a2d4a1dce0" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="84b981402662650474df3335faecbcd923394cb8002b38eda5150725a50260f8" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="14c50fa84cb7d0574c0e08829e11bbfb55f1859528bd8eabe0094afb7d7e01b4" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="537883c7afa0472c5cd39cba85f97b4ad303c638ca7bb313ad6acf8c91d0ff86" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="a35e6816f3eee5770baea2fca70b4c033f786cb07b4b9c62e98601d098183bb3" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="3ae0eb52fd67079799ce2283db57bbf60d38ddf60b06c9e683d6437f91e5b7e5" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="e52fe3318800a36ac0be0401a98ac07b05bdaf2288bbd920f6416892a49a1329" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="11bef8907cc65226b93d31d02ddd45f847ad85ee10a491f58205a0f99319e471" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="3a7373bcddfa127e6aa4b75634a36327412f0b86f7341859f78fae6e4585a19e" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="274b96e103b7e2b693d314675b863f2c82f149c40979a2d2ebff3eb188be11ef" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="6fb6d434c5e22c615006587166989ba820c2cd9c39fce72ebed1aadc6f76d780" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="ba6ac70b67a08a065b8943ac05f1b98abce6999775129db756a1dffdbd7d2f00" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="4bae16ec5bb0f42a61fe400afea10c483b80477fb59ec7aad36be1fc041a8378" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="ef79110e9beb81757b8ab1e1bafa140452fbfb7c5ba5ea45f31d336c2261a9fe" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="3a1a3719f7b7b63bd4cfdeb1661faa46a5c1236601e8cdb5d7be72e27abfc0ee" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="634dcecd8e54f1a4be187c4e0b45dcbd41eb6020fc19f00d4d30fb66699c54d6" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="340b0de8c8fc1cdef4e60b3648feadd0327b36a44323f30bfa011277a6e10359" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="1b109c47a43edc89159cf40aeaeb6c284cf7b22b65137267089bae3b1d9d6ed0" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="6ad846f58d3439de6f9f197fc2c5a81f352d139299187e8e614090bf620b1f2e" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="4070c443339f29fb40d12771652bb64953f709beb689d3b9fb1aeb0e8bacf8bb" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="ce342ea92c57237f827510ed57df629ce53a41aa099342fc7124f4ecd7122649" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="44ad320aa504db9d6cd2394d822fa2a615563f4abf4a7370115d5d4b7e4cc9d1" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="244e643481686c7fb90f41a643e9aed2dc6bc3c0c7b838f6ce71eaee0cf70df6" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="60dd1a756953794c73b6322445d66a8b4b1c4f3fa6fc862bbd0ada486bafc4ff" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="986fda3c78617e4fbc137ec0245a5adc5d0d2cf1078601a0c99cd5cb210b9ad7" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="01a6b824c247c187461e803cc89eee260df8bc0f81ab4f9c945aed5b4f63e5be" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="cdc773abe268faca56109e849a0c836e59fe980846d570e8cd62c2e83733dbec" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="c7c7b61f7dde00c437568f4af7e2006bb38e6aa9a61c87f0cea8744472f5a9b9" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="0c86b9fbc47a14bc1752c51d12eef78e425f9299a74a3ac2d004d1ea158b1d9c" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="57b75f4089bfd28dd6834428367d6ea1af38debd5c1e95569f989ddbe6a3aa8e" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="4ed37a4253ab9d0864b427d0f3f429f0e4496a41c20ea14f3217524791a2c3fa" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="977609da0a5826a12420199ef68da09e97bb54e238fdfbc204bde212f9fc0e06" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="d045c03fba2e794164b24f4e20382acd4cecc8df0140f326f775413c234fd8b9" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="b513fbac12d6861a080cec7398941bc09568365cb68b54aabb9d179eb429b64a" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="29a23d13acf606c76200ef5a8279b2c18dd263a984143e5f06668a8aa66e5fcc" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="1cf07b437e68b44bba364028aa218a788f68016ec8f291cf40e0a0aa9bc9a0c8" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="9b07659754f889927d50bd7a86781bfe6537a8c67764bf1b919f59605ab2511c" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="2c866073bff22dc27ce96778359197fdfbecd77cb2183bac110597d503460185" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="4f0b278ebe80f5ca604dba48284caf4578915c85bf161f38033970a7e4c0a7cd" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="58267d93731ea1bf577acd44773e4b3132901f8a95fd5ccf942b809130380d35" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="51e24b44a7361625f008bbc28e1d7178d3b637a7eeeedb034e09152451e3bd61" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="fb68c079a29a647e6e59e9d1430edf1c239b6bad62e4b77c05c3345cc7a51e9e" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="314a18556b47f9c8defbeaa4f972a9307b51de7fd7b6f6a0d568b5cdc0867fde" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="49d6021f33867acd3b85e914d2b7ebdb160956d15e3e866165f050b2a174c79e" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="e6186e643276296075d9d19f52082789b35672653d306770866873b0c174e17a" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="f879141e8b5d205bf5600b380b1ea20ac3a203d9730ffbfea4251474ac7118f7" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="e4b2ae2e6f4f8b493ce0ebf941f8b0454dea7340864c8c398d9938c1ae691b2e" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="c715d37a7c2ad09865dd0383cb77049e58c7a87ee686d7f8f00cd4e9ff66dffe" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="c974b91b47b67b288a013d37dacc4c24ba851f9d83ea36a08c218e91d30fcb79" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="1bae7df420863de5e15eaa0b9fe8569f5da8a550b81cd19b884ef575099b5572" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="125b6a0e1d72b0053dd56c56e90160aae22dafdfdb6cf1bd2050a76a7c4e4455" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="1c684a961ae97c96b7ca6eb418f74878699c4407c0a5ca4197c07c18fe7d6f27" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="dcd4dee213811de0f7978c14e50a1dd5256d5a2e702beef2c2d4b598efa69c67" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="4e02c379f3fed2d552d7d5735a5cd2906e7f568989abcc3972eded0faef87690" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="8da384c39fffc35f3b4f8b8b69d0180388f41d9c6f9943a242e8d09cf60aa035" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="71bc0119776624e4c38530de49fee7641b9534f81b40ff27aecdab6c2dde7d2c" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="bc451e59dd9b4412a567acb743c562c4d367058a1e65e3d9178e591d03b7123b" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="4e607cfb74dcbeb054e0d0860a92862461a89d013e57e9cf04270afc5ca86fa7" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="f525a1b9cfe3f147cfe81491781e92fe9240d2ef3fdacbdf0e461838f463bb3b" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="a26f1567caec7369ecedae02952ddc6493944bd91489fbe4bf47d074c3a01696" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="9eab2c98295254a36b65b817a3a5fad39383f06b7fb094ac889afed4a5581277" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="e20ed379b1b64c7d7dda0788a6d1e7d1eda50b0b36a2376e750fcd22470dd209" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-9" date="1544097600">- dissect-image: use right comparison function (#1602706)
- login: avoid leak of name returned by uid_to_name() (#1602706)
- firewall-util: add an assert that we're not overwriting a buffer (#1602706)
- journal-file: avoid calling ftruncate with invalid fd (#1602706)
- dhcp6: make sure we have enough space for the DHCP6 option header (#1643363)
- core: rename queued_message → pending_reload_message (#1647359)
- core: when we can't send the pending reload message, say we ignore it in the warning we log (#1647359)
- core: make sure we don't throttle change signal generator when a reload is pending (#1647359)
- proc-cmdline: introduce PROC_CMDLINE_RD_STRICT (#1643429)
- debug-generator: introduce rd.* version of all options (#1643429)
- chown-recursive: let's rework the recursive logic to use O_PATH (#1643368)
- chown-recursive: also drop ACLs when recursively chown()ing (#1643368)
- chown-recursive: TAKE_FD() is your friend (#1643368)
- test: add test case for recursive chown()ing (#1643368)
- Revert "sysctl.d: request ECN on both in and outgoing connections" (#1619790)
- detect-virt: do not try to read all of /proc/cpuinfo (#1631532)
- sd-bus: unify three code-paths which free struct bus_container (#1635435)
- sd-bus: properly initialize containers (#1635435)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
</package>
<package pkgid="89606875149c2b98d1edb4e67a92829b5b4f9bb6b28d302abe4df89d0d913504" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="b5278ab394f3d389d3482dd4ffa703610a3e9521e53c752eb9a3bc8261679a37" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1.0.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="32b58c755715a7ad8391e2476eea71aceb129008c304b3440c73fb74650f2a79" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-10" date="1544616000">- cryptsetup-generator: introduce basic keydev support (#1656869)
- cryptsetup: don't use %m if there's no error to show (#1656869)
- cryptsetup-generator: don't return error if target directory already exists (#1656869)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1656869)
- rules: watch metadata changes on DASD devices (#1638676)
- sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2 (#1653824)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
</package>
<package pkgid="a6445b2befb00dbfc3ec38c6833a85858ecdefce25e7cb1f6bded448fa17a109" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-11" date="1547467200">- unit: don't add Requires for tmp.mount (#1619292)
- remove bootchart dependency (#1660119)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-12" date="1550232000">- core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
- coredump: remove duplicate MESSAGE= prefix from message (#1664976)
- journald: remove unnecessary {} (#1664976)
- journald: do not store the iovec entry for process commandline on stack (#1664976)
- basic/process-util: limit command line lengths to _SC_ARG_MAX (#1664976)
- coredump: fix message when we fail to save a journald coredump (#1664976)
- procfs-util: expose functionality to query total memory (#1664976)
- basic/prioq: add prioq_peek_item() (#1664976)
- journal: limit the number of entries in the cache based on available memory (#1664976)
- journald: periodically drop cache for all dead PIDs (#1664976)
- process-util: don't use overly large buffer to store process command line (#1664976)
- Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2" (#1653824)
- journal: fix syslog_parse_identifier() (#1664978)
- journald: set a limit on the number of fields (1k) (#1664977)
- journald: when processing a native message, bail more quickly on overbig messages (#1664977)
- journald: lower the maximum entry size limit to ½ for non-sealed fds (#1664977)
- µhttpd: use a cleanup function to call MHD_destroy_response (#1664977)
- journal-remote: verify entry length from header (#1664977)
- journal-remote: set a limit on the number of fields in a message (#1664977)
- journald: correctly attribute log messages also with cgroupsv1 (#1658115)
- rules: add elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
</package>
<package pkgid="3b97e038d85b3957e40ff00d936104cdd67377df0b62ac747eff008d8f64b602" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-13" date="1551182400">- rules: add the rule that adds elevator= kernel command line parameter (#1670126)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
</package>
<package pkgid="ea1fa542190b5bd5867314479176c7aee54091275c43eac4f5e6e6b26153b41c" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="18.el8_1.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-14" date="1556625600">- rules: implement new memory hotplug policy (#1670728)
- rules: add the rule that adds elevator= kernel command line parameter (#1670126)
- bus-socket: Fix line_begins() to accept word matching full string (#1692991)
- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1678641)
- Allocate temporary strings to hold dbus paths on the heap (#1678641)
- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1678641)
- Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1703485)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-15" date="1558612800">- tree-wide: shorten error logging a bit (#1697893)
- nspawn: simplify machine terminate bus call (#1697893)
- nspawn: merge two variable declaration lines (#1697893)
- nspawn: rework how we allocate/kill scopes (#1697893)
- unit: enqueue cgroup empty check event if the last ref on a unit is dropped (#1697893)
- Revert "journal: remove journal audit socket" (#1699287)
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add an API for getting the cell at a specific row/column (#1689832)
- format-table: always underline header line (#1689832)
- format-table: add calls to query the data in a specific cell (#1689832)
- format-table: make sure we never call memcmp() with NULL parameters (#1689832)
- format-table: use right field for display (#1689832)
- format-table: add option to uppercase cells on display (#1689832)
- format-table: never try to reuse cells that have color/url/uppercase set (#1689832)
- locale-util: add logic to output smiley emojis at various happiness levels (#1689832)
- analyze: add new security verb (#1689832)
- tests: add a rudimentary fuzzer for server_process_syslog_message (#9979) (#1696224)
- journald: make it clear that dev_kmsg_record modifies the string passed to it (#1696224)
- journald: free the allocated memory before returning from dev_kmsg_record (#1696224)
- tests: rework the code fuzzing journald (#1696224)
- journald: make server_process_native_message compatible with fuzz_journald_processing_function (#1696224)
- tests: add a fuzzer for server_process_native_message (#1696224)
- tests: add a fuzzer for sd-ndisc (#1696224)
- ndisc: fix two infinite loops (#1696224)
- tests: add reproducers for several issues uncovered with fuzz-journald-syslog (#1696224)
- tests: add a reproducer for an infinite loop in ndisc_handle_datagram (#1696224)
- tests: add a reproducer for another infinite loop in ndisc_handle_datagram (#1696224)
- fuzz: rename "fuzz-corpus" directory to just "fuzz" (#1696224)
- test: add testcase for issue 10007 by oss-fuzz (#1696224)
- fuzz: unify the "fuzz-regressions" directory with the main corpus (#1696224)
- test-bus-marshal: use cescaping instead of hexmem (#1696224)
- meson: add -Dlog-trace to set LOG_TRACE (#1696224)
- meson: allow building resolved and machined without nss modules (#1696224)
- meson: drop duplicated condition (#1696224)
- meson: use .source_root() in more places (#1696224)
- meson: treat all fuzz cases as unit tests (#1696224)
- fuzz-bus-message: add fuzzer for message parsing (#1696224)
- bus-message: use structured initialization to avoid use of unitialized memory (#1696224)
- bus-message: avoid an infinite loop on empty structures (#1696224)
- bus-message: let's always use -EBADMSG when the message is bad (#1696224)
- bus-message: rename function for clarity (#1696224)
- bus-message: use define (#1696224)
- bus: do not print (null) if the message has unknown type (#1696224)
- bus-message: fix calculation of offsets table (#1696224)
- bus-message: remove duplicate assignment (#1696224)
- bus-message: fix calculation of offsets table for arrays (#1696224)
- bus-message: drop asserts in functions which are wrappers for varargs version (#1696224)
- bus-message: output debug information about offset troubles (#1696224)
- bus-message: fix skipping of array fields in !gvariant messages (#1696224)
- bus-message: also properly copy struct signature when skipping (#1696224)
- fuzz-bus-message: add two test cases that pass now (#1696224)
- bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages (#1696224)
- bus-message: avoid wrap-around when using length read from message (#1696224)
- util: do not use stack frame for parsing arbitrary inputs (#1696224)
- travis: enable ASan and UBSan on RHEL8 (#1683319)
- tests: keep SYS_PTRACE when running under ASan (#1683319)
- tree-wide: various ubsan zero size memory fixes (#1683319)
- util: introduce memcmp_safe() (#1683319)
- test-socket-util: avoid "memleak" reported by valgrind (#1683319)
- sd-journal: escape binary data in match_make_string() (#1683319)
- capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK() (#1683319)
- sd-bus: use size_t when dealing with memory offsets (#1683319)
- sd-bus: call cap_last_cap() only once in has_cap() (#1683319)
- mount-point: honour AT_SYMLINK_FOLLOW correctly (#1683319)
- travis: switch from trusty to xenial (#1683319)
- test-socket-util: Add tests for receive_fd_iov() and friends. (#1683319)
- socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov() (#1683319)
- core: swap order of "n_storage_fds" and "n_socket_fds" parameters (#1683334)
- execute: use our usual syntax for defining bit masks (#1683334)
- core: introduce new Type=exec service type (#1683334)
- man: document the new Type=exec type (#1683334)
- sd-bus: allow connecting to the pseudo-container ".host" (#1683334)
- sd-login: let's also make sd-login understand ".host" (#1683334)
- test: add test for Type=exec (#1683334)
- journal-gateway: explicitly declare local variables (#1705971)
- tools: drop unused variable (#1705971)
- journal-gateway: use localStorage["cursor"] only when it has valid value (#1705971)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-16" date="1564142400">- sd-bus: deal with cookie overruns (#1694999)
- journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
- journal: do not remove multiple spaces after identifier in syslog message (#1691817)
- cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
- cryptsetup: call crypt_load() for LUKS only once (#1719153)
- cryptsetup: Add LUKS2 token support. (#1719153)
- udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
- Change job mode of manager triggered restarts to JOB_REPLACE (#11456
- bash-completion: analyze: support 'security' (#1733395)
- man: note that journal does not validate syslog fields (#1707175)
- rules: skip memory hotplug on ppc64 (#1713159)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-17" date="1565179200">- mount: simplify /proc/self/mountinfo handler (#1696178)
- mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
- swap: scan /proc/swaps before processing waitid() results (#1696178)
- analyze-security: fix potential division by zero (#1734400)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18" date="1567166400">- shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
- sd-bus: adjust indentation of comments (#1746857)
- resolved: do not run loop twice (#1746857)
- resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
- resolved: query polkit only after parsing the data (#1746857)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 239-18.1" date="1572955200">- journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.2" date="1575028800">- ask-password: prevent buffer overrow when reading from keyring (#1777037)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.3" date="1580731200">- core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
- syslog: fix segfault in syslog_parse_priority() (#1781712)
- journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
- test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
- test: mask several unnecessary services (#1781712)
- test: bump the second partition's size to 50M (#1781712)
- sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
- sd-bus: reorder bus ref and bus message ref handling (#20201712)
- sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
- sd-bus: drop two inappropriate empty lines (#20201712)
- sd-bus: initialize mutex after we allocated the wqueue (#20201712)
- sd-bus: always go through sd_bus_unref() to free messages (#20201712)
- bus-message: introduce two kinds of references to bus messages (#20201712)
- sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
- sd-event: add sd_event_source_disable_unref() helper (#20201712)
- polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.4" date="1581595200">- sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-18.5" date="1582804800">- journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
- journal: use cleanup attribute at one more place (#1807350)</changelog>
</package>
<package pkgid="5edba7cba0c26f74006f68cdbcf2233af7b60b4710c80ad1e9261444d0cac5da" name="zsh-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.5.1" rel="6.el8_1.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.4.2-7" date="1520337600">- avoid crash when copying empty hash table (CVE-2018-7549)
- avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5-1" date="1523275200">- update to latest upstream release, which fixes the following vulnerabilities:
    CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
    CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
    CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-1" date="1523966400">- update to latest upstream release</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.5.1-2" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.5.1-3" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-4" date="1539259200">- fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-5" date="1542024000">- fix programming mistakes detected by static analysis (#1602743)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6" date="1545048000">- return non-zero exit status on nested parse error (#1654989)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6.el8_1.1" date="1582545600">- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6.el8_1.2" date="1583236800">- improve printing of error messages introduced by the fix of CVE-2019-20044</changelog>
</package>
<package pkgid="b333c160c62a605058a0be4ab2d7a37df1872a7b39e6e19d21ebb734195bb6ff" name="zsh-debugsource" arch="x86_64">
  <version epoch="0" ver="5.5.1" rel="6.el8_1.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.4.2-7" date="1520337600">- avoid crash when copying empty hash table (CVE-2018-7549)
- avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5-1" date="1523275200">- update to latest upstream release, which fixes the following vulnerabilities:
    CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
    CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
    CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-1" date="1523966400">- update to latest upstream release</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.5.1-2" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.5.1-3" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-4" date="1539259200">- fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-5" date="1542024000">- fix programming mistakes detected by static analysis (#1602743)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6" date="1545048000">- return non-zero exit status on nested parse error (#1654989)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6.el8_1.1" date="1582545600">- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.5.1-6.el8_1.2" date="1583236800">- improve printing of error messages introduced by the fix of CVE-2019-20044</changelog>
</package>
</otherdata>